RBAC Based Policy Research And Collaborated Aerospace Product Development Platform Application

With the network technology development, network security is coming to an important issue. Access control is actually a method that confines user's access ability and access scope by some means. The thesis presents research result on RBAC policy and its extension, aimed at collaborated aerospace product development platform.The thesis first analyzes access control mechanism and several kinds of typical access control polices, and then discuses traditional RBAC model and ARABC model. By introducing user group, role group etc., model is extended in three aspects of user, role and permission. The complicated roles turn into simpler role sets, and user management and role assignment are easy to be implemented. Authentication flexibility is improved.The thesis also describes the application of the extended RBAC model to unified authentication. Mechanism of the unified authorization module and its access control structure on LDAP are discussed. The design of module data relationship is emphasized. The performance of its access control is analyzed.Conclusions and future work is given finally.