Access Control Policy For CCB PMIS Base On Role And Task

In recent years, with the increase of personal mortgage business and the expansion of business networks, personal mortgage business of banks becomes more and more complicated. The important mortgage data stored on internal networks requires access protection of different levels. In addition to that, the constant changes of business process also make a very high request on the security of bank loan data. The exchanges of loan data among different branches become increasingly frequent by the day. As a result, the data security issues caused by the vulnerability and complexity of the loan data system itself continuously emerge. Accesscontrol is one of the most important ways to achieve information security. The purpose of it is to protect the security of the information being used, stored and processed in the bank mortgage system. In respond to the request of personal mortgage business in China Construction Bank, this thesis studies the method of achieving the security access to PMIS in CCB, through which the bank can prevent the internal unauthorized uses and the damage caused by maloperation of the valid users. In this thesis, the author analyzed the current situation and the development of accesscontrol study in China and throughout the world, and put forward an accesscontrol strategy based on task and role, after studied several typical accesscontrol mould. The thesis briefly introduced the PMIS in CCB, thoroughly related and analyzed several key issues in achieving accesscontrol mould, moreover it provided solutions for the business operation of personal mortgage. By using the concept of role, the mould distinguishes the idea of right and user and increases the manageability of accesscontrol; sets role properties to provide private permission required by multiple-inheritance and realizes the partial succession among roles; realized the exchanges of information among offices of different ranks by adopting role; And then, the thesis provides the framework, design and implementation method of the mould.