RBAC Model In Digitization Science And Technology Document Management Platform Application Research

With the development of computer and communications technology, information sharing plays more important role in modern society. With the development of information sharing technology, information security also gradually becomes the research area which is concerned by people, thus scholars made lots of suggestions on information security. Access control is a technical method to ensure security through control user's access capability.Based on research of theory and method of access control, the dissertation analysed the current access control technology model. DAC causes access authority leak and lack of flexibility appeared in MAC. RBAC, which was developed and applied widely in recent years, can has a better performance than the traditional access control technology. But one of difficulties is adjusting different permission management requirements effectively and reasonably in different environment. Therefore, it is necessary to make further extendable discuss for RBAC model according to its practical situation.Based on research of RBAC96 and RBAC97 models and according to Shaanxi Science and Technology Department 13115 Project(Scientific and Technology Document Digitization Management and Information Sharing Platform)'s access control requirements, the dissertation also extend RBAC model and modeling RBAC extension PH-RBAC model. In the model, manage hierarchical access permission and introduce to permission inheritance conception to solve some problems in permission management and reduce probability of error during authorization.Then apply RBAC model after extension to access control management module of the platform development. Moreover, this thesis described access control management module database design and interrelated modules design, discussed the specific technology of extended model such as JSP, jQuery and so on, and implemented PH-RBAC model application under the platform. The system test shows that the extended model can meet the needs of this platform permission management.