The Research And Design Of The RBAC Model With J2EE

Distrubuted application is a complete support to the need of a colony, separated in different place, collaborate and cooperate to complete some work.Such character raises the request of system security. With the Distributed application is becoming the main trend in the computer application and software development, the information security becomes more and more important. The main information security technology includes Date Encryption,Identity Authentication,Access Control and Key Management.The Access Control is a can-not-replaced and very important technology among them. It can keep unauthenticated user from intruding or prevent authenticated user from destroying the data.The thesis mainly research the Access Control technology under Distributed environment. Based on the comparation and analysis of three leading Access Control technology - Discretionary Access Control, Mandatory Access Control , Role-Based Access Control, the thesis synthesises main models of Role-Base Access Control and presents extension scheme point to the insufficiency of the models, and designs GDTRBAC model. This model adds the ability of task-management and enterprise structure management to RBAC system. It also appends state to the object in order to make the model have the ability to handle task sequence, so that it can be used in work flow system. Finally , the thesis detailed analysis the function and structure of GDTRBAC model , and design GDTRBAC system using technology of J2EE platform.