RBAC策略在CORBA分布式对象系统安全中的应用  

Application of RBAC Policy in CORBA Distributed Object System Security

作　　者：张志勇[1] 普杰信[1] 

机构地区：[1]河南科技大学电子信息工程学院,洛阳471003

出　　处：《计算机工程》2005年第20期159-161,共3页Computer Engineering

基　　金：教育部科学技术重点资助项目;河南省自然科学基金资助项目(0311012600);河南科技大学青年基金资助项目(2003QN06)

摘　　要：基于RBAC策略和CORBASec框架,引入对象访问的约束机制,给出了一种CORBA安全访问控制策略模型——GRBAC forCORBA(General Role-Based Access Control for CORBA)及其访问控制与决策过程。该模型在“基于中间件技术的分布嵌入式系统研究”中得到了实际应用,解决了分布式异构环境下域间访问控制的复杂性问题并且更易于实现企业级自定义安全策略。The constraints of object access is introduced in the basis of RBAC policy and CORBASec frame. An access control model for CORBA, GRBAC for CORBA （General Role-Based Access Control for CORBA）, is proposed, including its access control and decision processes. The model is applied in “distributed embedded system based on middleware technology”, and resolves the problem of access control between domains in distributed heterogeneous environment, it can realize self-defined enterprise security policy easily.

关 键 词：分布式对象系统 CORBA安全 RBAC 访问控制 访问决策 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]