基于动态目录树的权限管理模型的设计与实现  

Design and implementation of authorization management model based on dynamic TreeView

作　　者：李昌国[1] 杨宇科[2] 杨春[2] 

机构地区：[1]四川师范大学基础教学学院,四川成都610066 [2]四川师范大学实验设备处,四川成都610066

出　　处：《计算机工程与设计》2009年第16期3774-3777,共4页Computer Engineering and Design

基　　金：四川省教育厅科研基金项目(07ZC058)

摘　　要：在分析了RBAC、TBAC等模型存在局限性的基础上,结合单点登录的高校综合信息管理系统的特点,提出了一种新的基于动态目录树、权限匹配码的权限管理模型,并在高校综合信息管理系统的安全管理中实现了基于动态目录树、权限匹配码的访问控制。实践结果表明,该模型能够有效地实现系统的安全管理和降低应用服务器用于权限管理的运行代价。On the basis of analyzing the technology limit existing in the RBAC model, TBAC model and taking the characters ofauthority management in the synthetic information management system of college into consideration, a new authority management model based on dynamic TreeView and authority matching code is presented. And it has been realized in the security management of the synthetic information management system of college. It is shown by practice that this model can effectively realize the security management and reduce the working cost of authority management in the web application server greatly.

关 键 词：动态目录树 访问控制 权限管理 基于角色访问控制 基于任务访问控制 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]