The Research And Application Of Access Control Model In Information System

Access control is an important measure to protect the information system resources and allows or restricts the accessing capabilities and scope explicitly. The goal of access control is to prevent unauthorized users from invading the system and also to avoid the legitimate users to use system resources illegally. With the development of information construction, the ideas and methods of access control technology are applied to various fields rapidly and become one of the key technology to solve the secure problems of information system.The existing access control model are introduced. On the basis of analyzing the information system access control requirements and characteristics, an Extended Task-Role-Based Access Control model is built. This model combines the RBAC model with TBAC model, and makes the organization structure independent from role properties in the past. Besides, the basic concepts of the model, formal definitions and constraint description are proposed in the thesis.In the practical application of the model, the process of task flow control and dynamic permissions are discussed according to the task characteristic of information system. Combining with the own security mechanism of Lotus platform, the improved access control model is applied to information system, which implements the application flow of access control. It takes the application of Official Document Management in system as an example to analyze the execution process and permission assignment of document transferring. The application of the model solves the problems of access control in traditional workflow information system and strengthens the ability of the secure access control of system.