统一权限管理下的Web应用管理平台  

Web application management platform based on unified permission management

作　　者：靳大尉[1] 赵成[1] 陈刚[1] 

机构地区：[1]解放军理工大学指挥信息系统学院,南京210007

出　　处：《计算机应用》2013年第A02期305-306,311,共3页journal of Computer Applications

摘　　要：提出并实现了一种可管理多个Web应用、多级、细粒度的权限管理平台。对NIST RBAC进行了扩展,增加了客体层次关系、基于规则的角色指派和硬件绑定约束。应用JavaEE、Eclipse RCP、设计模式等多种方法和技术完成系统实现。实践证明,系统具有良好的实用性和可扩展性。A multilevel and fine-grained authority management platform was proposed and designed, which can manage lots of Web applications, extend NIST RBAC and add object hierarchical relationships, role assignment based on rules as well as hardware binding constraints. The system was achieved by JavaEE, Eclipse RCP, design pattern and so on. In practice, it is proved that the system has excellent utility and extensihility.

关 键 词：WEB应用 基于角色的访问控制 身份认证 访问控制 设计模式 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]