Abstract: In order to apply the ideal of separating strategies from mechanism to access control, we proposed a kind of rule engine technology in access control model. The access control strategies were represented by rules. In the engine, attributes were loaded on real-time and rules were executed dynamically by Java reflective technology, which gets better flexibility. Then this paper proposed a rule matching algorithm based on the sharing node in multi-rule by researching on the Rete algorithm, which can improve the matching efficiency.


Key words: access control, rule engine, Java reflection, sharing node, flexibility