基于RBAC和AOP的访问控制研究与应用

《基于RBAC和AOP的访问控制研究与应用》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、西南交通大学硕士学位论文基于RBAC和AOP的访问控制研究与应用姓名：李志英申请学位级别：硕士专业：计算机应用技术指导教师：楼新远20070401西南交通大学硕士研究生学位论文第

2、l页AbstractTheAccessControllingModelbecomesoneofthediscussedhotspots，andtheModelbasedonRBAC(Role．BasedAccessContr01)isafocuSinthesehotspots．Inaddition，ithasshowngreata

3、dvantageinmeetingthesecurityneedinmanagementinformationsystem．Withaccesscontrolservice，illegalapproachisrestrictedfromcriticalresource，anddamagecausedbyillegaluser’Sintrusionsorlegaluser’sinappropriateoperationsisreduced．Comparingwithgeneralaccesscontrolmo

4、del，RBACintroducestotheconceptof‘role’．RBACassignaccesspermissionstorelevantroles,andexecutesaccesscontrolbasedonaUSer，Sroleinanorganization．Inthisthesis，firstly,severalpopularaccesscontrolmodelsincludingrelevantenvironmentareresearchedinthispaper．TheRBACm

5、odelistheemphasisofthem．Althou曲theRBAcmodelhasacceptedbymanypeople，thetraditionalRBACmodelisdefectiveinrole-management，suchasheavycomplexityandrougIlgranularity．Asaresult，animpmvcdmodelisproposed，andthecharacteristicsofthismodelaredescribedindetailinwllich

6、group．specialpermissionsandpermissionconstraintelementsareincluded．AndthentheimplementationofapplyingthisimprovedmodelbasedAspect—OrientedProgramming(AOP)technologyisstudiedindepthanddescribedindetail．Asaconclusion．AOPdoesWelIinseparatingthebehaviors，which

7、crosscutmanycomponentofthesystem．Thesebehaviorscanbeimplementedseparately．Bysuchapproach，whenthetargetisinvokedthepermissionverifiationmechanismwillbetriggeredautomaticallybasedontheprincipleofinterceptorinsteadinheritstheaccessverifyandinvokesit．Itresults

8、inthepermissionverycodeinoperationmodulecompletelydisappear．Finally,thismodelhasbeenimplementedbasedonAOPwithwhichthecodesaregreatlyreusedaswellasthecodescomplexityofthekernelmodulearereducedandthecoupleofthemodulesareeliminatedbycontrastingwith0bject·Orie

9、ntedProgramming(ooP)．Andthen，theimplementationisdetailedlydescribed．TlliSthesisisonthebackgroundoftheframeworkFrameServer,buttheRBACmodelisn’tlocalizedattheframework．TheimplementationiSbasedonAOP，SOitif丘lfort