PMI授权管理系统的接口设计  

Connection Design of Authorization Management System Based on PMI

作　　者：周彦萍[1] 

机构地区：[1]河北省科学院应用数学研究所,河北石家庄050081

出　　处：《计算机技术与发展》2010年第3期167-171,共5页Computer Technology and Development

基　　金：河北省财政计划项目(08926)

摘　　要：授权管理基础设施PMI是目前能够解决大规模网络安全问题的可行方案,但国内的PMI应用才刚起步。文中介绍了一种PMI授权管理系统,给出了系统架构,详细论述了系统授权管理的接口设计,为PMI应用提供了一个可借鉴的实例。该系统采用PMI/PKI技术、LDAP数据库和RBAC模型等,实现了信息资源的访问控制。通过将访问控制机制从具体应用系统的开发和管理中分离出来,屏蔽了安全技术的复杂性,使访问控制机制与应用系统之间能灵活而方便地结合和使用。PMI is at present can solve the large- scale network security question feasible plan, but our country＇s PMI application just now starts. One kind of authorization management system based on PMI is introduced, the system construction is given, the connection design is described in this paper. This system has provided the example for PMI application. It uses the PMI/PKI technology, the LDAP database and the RBAC access control model and so on, has realized the information resource access control. The ecxnplexity of the safety technology is shielded in the system to connect and use flexibly and conveniently between the access control mechanism and the application system.

关 键 词：PKI/PMI 授权管理 RBAC访问控制模型 接口设计 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]