Application of RBAC in Management Information System of ATP on board equipment
-
摘要: 基于角色的访问控制(RBAC)是保证信息系统资源安全的一种策略。本文详细介绍了RBAC模型,并给出了其形式化定义。将RBAC模型应用于ATP车载设备管理信息系统,设计了该系统访问控制的数据物理模型,实现了该信息系统对关键资源的限制访问。该系统成功地投入使用,表明RBAC模型可有效实现信息系统的权限控制。Abstract: Role-Based Access Control (RBAC) was a means to ensure the security of information system resources. This paper described the RBAC model and given its formal definition. RBAC model was applied to ATP Management Information System, and physical data model of access control was designed. Finally it was implemented restrict access to the critical resources of the System. The System was used successfully, and indicated that RBAC model could effectively control access of Information System.
-
Key words:
- ATP /
- Information System /
- RBAC
-
[1] 马水平.基于角色的安全访问控制机制的研究[D].青岛:中国海洋大学,2005. [2] 洪 帆. 访问控制概论[M].武汉:华中科技大学出版社, 2010. [3] 刘 强. 基于角色的访问控制技术[M].广州:华南理工大学出版社,2010. [4] 朱亚宁.分布式环境下的权限控制系统的研究与实现[D].大连:大连理工大学,2007.
