权限管理及访问控制系统的研究与实现  

Design and implementation of permission management and access control system

作　　者：匡宏[1] 赵恩来[1] 郝文宁[1] 黄亚[1] 穆新国[1] 

机构地区：[1]解放军理工大学工程兵工程学院,江苏南京210007

出　　处：《计算机工程与设计》2011年第8期2588-2591,共4页Computer Engineering and Design

摘　　要：针对传统的权限管理和访问控制方法无法满足日益增长的信息安全保障需求,采用PKI/PMI技术实现了用户权限和访问控制的分级管理,实现了权限管理和应用访问控制的分离管理,确保了用户权限管理独立于应用访问策略的设定和实施。综合考虑星型网络结构可能出现的单点故障,采用镜像等技术确保广域网络的故障不影响本地用户对本地应用的访问。实验结果表明,该系统减少了访问控制的复杂性,降低了权限管理的开销,增强了权限管理的灵活性,实现了系统的安全机制。Aiming at the traditional permission management and access control methods can not meet the growing information security assurance, the hierarchical management of user permissions and access control is realized. The separation management of user permission management and application access control is implemented and the independent of the user permission management and the access policy setting ＆ implementation is ensured by using the PKI/PMI technique. Considering the star network structure may appear single point of failure, mirror image technology is used to ensure that the wide area network failures did not affect domestic users to access local appli- cations. An experiment is conducted and the experimental results show that the system reduce the complexity of access control, decrease the overhead of permission management, enhance the flexibility of permission management and implement the security mechanism of the systems.

关 键 词：权限管理 访问控制 信息安全 公钥基础设施 授权管理基础设施 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]