The Design And Realization Of The MIS For Adult High Education That Bases On Technology Of Web Services

Combined the technology of Web Services, the architecture of MIS for adult high education was constructed. WS-Security and WS-AT were used in business-level architecture, which made the Web Services go into the market from the laboratory. According to the demand of the MIS for adult high education, the concepts and techniques of class-based access control namely, UCP (user, class, permission) access control models were proposed in this thesis. Furthermore, the application of the model in the MIS was realized.The newest technologies about Web Services were summarized in the view of development in this thesis. The evolution of software development method including SOA model was described. Then, the bottom-up introduction of the Web Services standards and specifications were introduced, and the development of Web Services protocols stack was analyzed. The rapid evolution during the last few years has resulted in some challenges that were pointed out in the document.On the basis of the requirements analysis of MIS for adult high education based on Web Services, the disadvantage of system structure based on the traditional Client/ Server was analyzed. Combined the distributed technology of Web Services, the schemes of the design and realization of MIS for the Web Services were constructed, and the idea of SOA was proposed.Especially, this dissertation focuses on the high level application of Web Services, which are WS-Security and WS-Atomic Transaction. This thesis analyses the logic security requirement of the MIS, the message security includes WS-Security roadmap and WS-I Security Profile are introduced. Then this thesis presents an application of WS-Security in the MIS that includes Username, integrity and confidentiality. Also, after describing the WS-Atomic Transactions, This paper explores how it works in the MIS and analyzes the transaction flow behind the scenes.The other security requirement of the MIS was access control, besides the operation objects, there were time objects and data objects in the access control of the MIS for adult high education. For the traditional RBAC model, it's difficult to satisfy the requirement brought forward above. So, UCP access control model was presented by this thesis. Compared to traditional RBAC model, UCP access control model added a dimension, which met the security requirement of the MIS.