关键词: 访问控制, 访问控制框架, 可插拔

Abstract: The pluggable framework for access control(PFAC) is proposed. The framework includes information extraction module, pluggable configuration module, implementation of access control devices, and access control decision platform. The framework is implemented in a small banking system. Through the use of the framework, banking system is very well adapted to the everchanging rules of access management. Features of PFAC are showed with high reusability, easy to use and easy to operate. PFAC has solved when various domains redundant development access control module and the deployment brings the question which cause the code redundancy of application system, difficulty with maintains entrusts with heavy responsibility, can protect the application system resources well, safeguard systems correct movement.

Key words: access control, framework for access control, pluggable