Design And Implementation Of Access Control Modeling In Land-use Planning Management System

Access control is an important research area of computer information security. The study of access control models and methods of modeling have increasedly been paid attention. However, some shortcomings of the existing access control models for land-use planning management systems have been identified. These shortcomings are illustrated as follows: (1) Because of the diversity of land-use planning management business, the current user authority has not been able to represent "the Principle of Least Privilege" (2) Limitations exist in the users' privileges to the spatial data. In this thesis, the access control models are integrated with Geographic Information Systems (GIS) to establish suitable models of the access control for land-use planning management systems.This thesis firstly analyses and compares the existing access control technologies and then applies a concept of "task roles" based on the model of RBAC (Role-Based Access Control) to the access control models to meet the need of "the Principle of Least Privilege" in land-use planning and management systems, which also combine with the characteristic of the business in land-use planning management system, through a thorough discussion of constructed methods of the access control models. Finally, the research on the essential factor's layer models on the land-use planning management systems, the method of the division of the spatial object's authorized granularity and the spatial operation type are established, therefore, to expand the privilege of spatial data's management power in the RBAC and construct LP-RBAC (Land Plan-RBAC) model, which is suitable to land use planning systems.This thesis also gives a formal definition of LP-RBAC model. The operation procedures and the system constraints are discussed as follows. The Use Case View of this model, as well as the static model (the Object Class Diagram, the Database Model), the dynamic model structure's Collaboration Diagram is illustrated separately using UML modeling language, follow by the application examples of LP-RBAC models in land-use planning and management systems.The research in this thesis proved that the proposed access control methods based on the LP-RBAC model was feasible, which could not only meet the needs of the least privilege of the authorized users in land-use planning management systems, but also improve the land-use planning systems from the spatial data access control point of view. Other GIS access control modeling could also benefit from the significant achievements of this research.