The Application Research On The Paper Teleprocessing System Based On Role-Task Access Control Model

Access control is based on a series of custom-made strategies involving restrictions of access to the main object. The purpose is to ensure the security of the system's resources. This paper regards the access control process of a paper teleprocessing system as the research object. To begin with, it introduces the existing access control technology and the limitations existed in brief. After that, an improved access control model based on role-task(I-RTBAC) is put forward. The new model which classifies roles and tasks according to practical requirements integrates the strong points of role-based access control model (RBAC) and task-based access control model (TBAC). It is specified in this paper that the proposed model lowers the complexity of access strategy and ensures the security as well. At the meantime, the improved model can be applied in workflow systems and non-workflow systems.Through J2EE platform,combined with Struts2, Spring and Hibernate technology, this paper narrates the designing and implementation of I-RTBAC model in the paper teleprocessing system, especially some key points and difficulties including the design of the system's database, the implementation of the access control configuration tool, the implementation of static authorization mechanism, the implementation of dynamic authorization mechanism, the task scheduling process, etc. The access control configuration system provides tools to guarantees the data support in the runtime of the system by defining all kinds of entities and constraints of access control. Meanwhile, access control authorization system effectively guarantees the security of access to system's resource information and the successful implementation of tasks of the workflow system. Experimental results show that the system based on I-RTBAC is of maintainability, reusability, scalability, and safety.