Design And Implementation Of Role-Based Access Control Framework In Unstructured Information Processing Platform

Along with the incredibly booming development of the Internet, the quantity of the data exchanged on the Web is greatly increasing everyday. Most information now presents as unstructured form such as multi-format documents, emails,web pages, video/audio objects, graphics, etc, instead of traditional structured forms. This thesis is on the background of the requirements of an actual project, Unstructured Information Processing Platform. Unstructured Information Processing Platform is an open, scalable and extensible platform for unstructured information analysis and management. However, when processing access control for unstructured data in Unstructured Information Processing Platform, there are some requirements as follows: It requires a unified access control for all the distributed, heterogeneous, unstructured data. It requires user's permissions can be dynamic changed in different synergetic Stage. You can dynamically authorization. It requires more flexible authorize,such as a user belonging to a role can change the permissions temporary. It requires more fine-grained access control. Traditional Role-Based Access Control (RBAC) model obviously can not fully meet the above requirements.In response to these practical problems, this thesis proposes a modified role-based access control Model-LR2BAC. This model is based on GFAC and ARBAC97. It separate access control enforcement facility and decision facility. This model, using rules and LDAP, can process access control in a unified dynamic flexible and fine-grained way.This thesis also design and implement an access control framework. This framework has six modules, including Authentication module, user management module, role management module, permission assignment module, access control module and rule management module. This framework use GWT in presentation layer, enhancing user experience.Currently, an access control based the framework has already been used in Unstructured Information Processing Platform. Operation shows that the framework is effective and feasible.