Web信息系统中统一细粒度访问控制的研究  

ON UNIFIED FINE-GRAINED ACCESS CONTROL IN WEB INFORMATION SYSTEM

作　　者：朱佃波[1] 陆剑江[1] 杨季文[1] 

机构地区：[1]苏州大学计算机科学与技术学院,江苏苏州215006

出　　处：《计算机应用与软件》2009年第5期126-129,共4页Computer Applications and Software

摘　　要：为了实现Web信息系统的细粒度访问控制,研究了MVC(Model-View-Controller)构建模式,然后分别从视图层和控制层上考虑客体的结构和形式,在NISTRBAC的基础上提出了OHRBAC(Object Hierarchy RBAC)模型,并基于该模型分别利用JSP标签技术和AOP技术实现了视图层和控制层的细粒度访问控制,并抽象出Java Web信息系统中细粒度访问控制的一般解决方案,该方案安全性高、操作方便、可以快速部署、可扩展、可伸缩。In order to realize the fine-grained access control in Web information system,in this paper it studied the Model-View-Controller （MVC） architectural pattern,analyzed the structure and the modality of the objects on View and Control levels, then proposed an extended model named OHBAC which is based on the NIST RBAC, and realized the fine-grained access control on View and Control levels based on this model by using JSP tag and AOP technology on the J2EE platform. At the end of this paper,a general solution for fine-grained access control in Java Web information system is abstracted,it is a safe,deploy effective, extensible and flexible scheme.

关 键 词：访问控制 细粒度 MVC WEB信息系统 JSP 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393[自动化与计算机技术—计算机科学与技术]