Apama平台下访问控制的实现  

Implementation of Access Control in Apama Platform

作　　者：陈树江[1] 

机构地区：[1]中共浙江省委党校,浙江杭州311121

出　　处：《计算机与网络》2011年第17期66-69,共4页Computer & Network

摘　　要：访问控制是通过某种途径来准许或是限制主体对客体访问能力及范围的一种方法。本文结合Apama应用的特点,选择了基于角色的访问控制模型(Role-Based Access Control,RBAC)。根据此模型,把Apama平台下的访问控制实现分成了两个阶段:在用户身份认证阶段,结合JAAS(Java Authentication and Authorization Service)技术,采用了合适的认证机制和配置,并对此进行了设计和实现;在授权控制阶段,根据Apama平台下受保护资源的特点,合理设计访问策略,利用此策略实现授权控制。Abstract：Access control is used to permit or limit user＇s access to objects by some means.It＇s better to use role-based access control according to the characteristic of Apama application. With RBAC, this paper divides the implementation of access control into two phases： in the part of user authentication, combined with JAAS, this paper designs and implements user authentication by means of proper authentication mechanism and configuration; in the part of user authorization, it also designs access policy according to the characteristic of protected data and implements the access control with it.

关 键 词：访问控制 角色 JAAS Apama 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]