Research On Access Control And Implementation Of Changzhi Netcom MIS

With the development of the computer, communication and network, most of the Enterprises want to enhance competitiveness, reduce operating costs and improve the efficiency of decision-making by Information Construction. But the security of network application has become one of main factors that restrict its development; Security management is very challenging for its complexity in the administration of many network systems. Access control, as an important security technology, has been applied in the operation system, the database management systems, security management and network operating system etc. Role-Based Access Control (RBAC) Model is nowadays the best and most popular access control model. Compared with traditional discretionary and mandatory access control, it can provide better flexibility and expandability.The paper aims at the design and implementation of Changzhi Netcom MIS, First, the paper compares and analyzes the advantages and disadvantages of the three main technologies of access control: DAC, MAC, RBAC. Then the paper specializes in the role-based access control model, and introduces the concepts of group and station according to business needs of Changzhi Netcom MIS. The enlarged role-based access control is called GSRBAC/Web Model (Group and Station Role-Based Control / Web Model). To enhance Business Management and simplify the complexity of Authorization, We introduce the concept of group and station. Design every functional component and make use of the model to expand Acegi Security System on the basis of GSRBAC/Web Model. Second, use the OSWorkflow workflow engine in the MIS, in order to strength its teamwork concept. Describe development process of Changzhi Netcom MIS in detail from system modeling, access control, OSWorkflow workflow technology and the functional module.