| At present, the construct of the police system's communication has offered convenient shortcut channel for every department of the police, and has implemented resource sharing with the terminal user. That it brings forward a higher requirement to the network safety and secrecy too. The access control mechanism is basic composing part for establishes the network security system, is the network safety premise and the foundation, and also it offers the reliable guarantee for the implementation of other safety serves. Therefore, needs to design the realization access control system (to hereafter refer to as access control system) in the police information network, by enhances its security performance, below is its several principal aspects work:1 .To unifies the authorization access control model based on the role proxy to conduct the research and the discussion, in the police information network in view of the public net mobile connection system (to hereafter refer to as mobile connection system) the access control special demand: The personnel many, the fluidity greatly strengthened, the place of duty dispersed, the service type diversely, the jurisdiction adjustment is frequent and so on the characteristic, has produced the improvement authorization role tree's jurisdiction division plan, and has carried on the realization with Power Builder to it. The practice proved that, this plan could to apply for the user that registers to carry on the strict careful role assignment and the jurisdiction division, may satisfy the access control demand of the mobile connection system.2. According to the design proposal, connects the system after the analysis and the research migration the security requirements, in view of the access control characteristic, according to audited the object differently to formulate specially the different audit strategy, and the union secure protective measure, the use many kinds of methods carried on the audit trail to the sensitive data and the important operation. |
