计算机与现代化 ›› 2010, Vol. 1 ›› Issue (5): 164-166.doi: 10.3969/j.issn.1006-2475.2010.05.046
• 信息安全 • 上一篇 下一篇
张先勇，李 勇，张 浩
收稿日期:
修回日期:
出版日期:
发布日期:
ZHANG Xian-yong, LI Yong, ZHANG Hao
Received:
Revised:
Online:
Published:
摘要： 基于角色的访问控制（RBAC）具有减少授权管理复杂性、降低管理开销、增强系统安全性等优良特性。本文分析了RBAC模型的基本原理、结构，描述了RBAC在B/S模式信息管理系统中的应用模型，并将这种新的应用模型应用到某公司的业务信息管理系统开发中，实现了用户与角色相关联、角色与权限相关联，不同用户拥有不同的操作权限，增加了系统使用的安全性以及系统管理的工作效率。
关键词: 基于角色的访问控制（RBAC）, B/S, 信息管理系统（MIS）, 权限管理
Abstract: RBAC has many excellent characteristics, for example, it can reduce the complexity of authorization management, lower management costs, enhance system security and so on. This paper analyzes the basic principle and architecture of RBAC model. RBAC is described in the B/S model of information management system, and the new model is applied to a company's business information management system development. The association between users and roles, and roles and permissions is realized. So different users have different operating authority in this business information management system. In addition, the system’s security and management efficiency are improved.
Key words: role-based access control, B/S, management information system, privilege control
中图分类号:
TP393
张先勇;李勇;张浩. RBAC在B/S模式信息管理系统中的研究与实现[J]. 计算机与现代化, 2010, 1(5): 164-166.
ZHANG Xian-yong;LI Yong;ZHANG Hao. Research and Realization of Role-based Access Control in B/S Model of Information Management System[J]. Computer and Modernization, 2010, 1(5): 164-166.
0 / / 推荐
导出引用管理器 EndNote|Ris|BibTeX
链接本文: http://www.c-a-m.org.cn/CN/10.3969/j.issn.1006-2475.2010.05.046
http://www.c-a-m.org.cn/CN/Y2010/V1/I5/164
