Multi-granularity spatial-temporal access control model for web GIS  

Web GIS中多粒度时空访问控制模型(英文)

作　　者：张爱娟[1,2] 高井祥[2] 纪承[1] 孙久运 鲍宇[1] 

机构地区：[1]中国矿业大学计算机学院,徐州221116 [2]中国矿业大学环境与测绘学院,徐州221116

出　　处：《Transactions of Nonferrous Metals Society of China》2014年第9期2946-2953,共8页中国有色金属学报（英文版）

基　　金：Projects(41074010,41171343)supported by the National Natural Science Foundation of China;Project(BK20140185)supported by Jiangsu Province Natural Science Foundation for Youths,China;Project(51204185)supported by National Youth Science Foundation of China;Project(2014QNA44)supported by Youth Science Fund of China University of Mining and Technology

摘　　要：The multi-granularity spatial-temporal-related access control（MSTAC） model was proposed to meet the spatial access control requirements for the service-oriented spatial data infrastructure（SDI）. MSTAC extends the attribute constraints of role-based access control（RBAC）, which includes the user＇s location attribute, the role＇s time constraint, the layer vector constraint of a map class, the scale and time constraints of a geographic layer, the topological constraints of geographic features, the semantic attribute expression constraints of geographic features, and the field constraint of feature views. Through this model, authorized users would be limited to access different granularity spatial datasets, such as the map granularity, the graphic layer granularity, the feature object granularity and the feature view granularity. Finally, the MSTAC model is achieved in a web GIS, which shows the positive and negative authorizations to different services in different data granularities and time periods.为了满足面向服务的空间数据框架对空间访问控制的需求,提出多粒度的时空相关访问控制模型MSTAC。此模型在基于角色的访问控制模型基础上,进行属性约束扩展。属性约束包括上下文时间属性、用户的位置属性、角色的时间属性约束、地图类的图层向量约束、图层的尺度及制图时间约束、地物要素间的拓扑约束、地物要素的语义属性约束以及要素视图的字段约束。通过此模型,授权用户将受控访问不同粒度的空间数据集。这些粒度包括地图粒度、图层粒度、要素对象粒度和要素视图粒度。最后,将MSTAC模型在web GIS中实施。该实例显示了在不同的数据粒度上和不同的时间段内,系统可以对不同粒度服务进行肯定和否定授权。

关 键 词：MSTAC multi-granularity control SPACE web GIS 

分 类 号：P208[天文地球—地图制图学与地理信息工程]