可插拔访问控制框架的研究与实现  

Research and implementation on pluggable framework for access control

作　　者：申利民[1] 邢昌元[1] 宋诚忠[1] 

机构地区：[1]燕山大学信息科学与工程学院,河北秦皇岛066004

出　　处：《计算机应用研究》2009年第12期4735-4739,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(60873008);河北省自然科学基金资助项目(F2008000861)

摘　　要：针对现有大部分应用系统需要通用访问控制模块及访问检测被分散在应用系统各个部分中的问题,分析了访问检测的独立性和非集中性特征,提出一种将接口抽取方法与关注点分离思想结合的可插拔访问控制框架,给出接口抽取法的形式化定义、插拔配置的方法和步骤、访问控制判定实现过程,解决了各领域重复开发访问控制模块及部署时给应用系统带来的代码冗余、难以维护重用的问题。最后给出考试系统中的一个应用实例。Many application systems need access control module. However, it has not a general access control module which is accepted by peoples, access detection operations often spread out in various parts of application systems. The paper presented a pluggable framework for access control （PFAC） used the thought of interface extraction method with separation of concerns, gave the formalized definition of extraction method and processes of configurations of framework. PFAC solvecd problems which lead to the development of duplicate access control module, redundancy and difficult reuse of code. Finally, implemented the framework by using Java language, and gave an application in examination system.

关 键 词：访问控制 访问控制框架 访问控制检测 可插拔 接口抽取法 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]