三权分立安全管理软件的设计  

Design and Implementation of Security Management Software Based on Power Separation Mechanism

作　　者：马钊[1] 胡俊[1] 

机构地区：[1]北京工业大学,北京100124

出　　处：《信息安全与技术》2012年第5期39-41,45,共4页

基　　金：国家973项目子课题"可信计算基础理论与关键技术研究"(编号:2007CB311106)

摘　　要：三权分立的管理机制,以最小特权和权值分离为原则,将超级用户特权集进行划分,分别授予系统管理员、安全管理员和审计管理员。在此机制下安全管理软件在实现系统管理、安全管理和审计管理功能的同时,也要保证管理员权限的隔离。使用Qt作为开发工具,通过在图形用户界面设计中融入访问控制机制,实现对超级用户权限的划分。这种在图形界面中实现访问控制的方法,可以推广到类似的多用户权限应用程序的设计中。The power separation mechanism is based on the least privileges and separation of duty. According to the mechanism, Super-user privileges are divided into collections that are respectively granted to the system administrator, he security administrator, and the auditor. In that case, the security management software should not only accomplish the function of system management, security management and audit, but also the insulation of the power of the administrators. We use Qt as the development tool. By adding access control mechanism into graphic user interface, we separate the privileges of Super-user. The way we used here can be used in any similar multi-user applications.

关 键 词：三权分立 图形用户界面 访问控制 QT 

分 类 号：TP311.11[自动化与计算机技术—计算机软件与理论]