Design And Realization Authorization Management System Role-based Access Control

In order to make best use of information technology in governmental agencies, most individual units adopt their own business databases, standards and different rules. Consequently, information can not be shared among different units and user operation becomes inconvenient. Particularly, this will result in security and management problems. Since information technology prevails, the above problem is becoming obvious. Based on the fact that has been mentioned above, this thesis is mainly concerned with the construction of information exchanging and sharing platform in Hebei province. The ultimate goal is to develop an authorization management system in order to realize a unified management of resources in all government agencies. Hopefully, this will bring higher efficiency and security.Access control is the critical technology that is used to build the authorization management system. This thesis starts from analyzing autonomous access control and driven access control and then Role-Based Access Control is proposed (RBAC). RBAC is to introduce roles between users and access levels. It means:a user is related to one or more roles, while a role is related to one or more access levels. This technology can solve the problems about security and unified management. Further, Hebei Provincial Authorization Management System is developed based on the above technology together with software engineering, network and database technologies. The developed system can be used in different operating systems, for example Window 2003. It is of high access efficiency and good security. It is the first time that a provincial authorization management system has been realized domestically. Base on the Windows 2003 and Oracle system, six aspects of this system have been tested, which include administrator management, agency management, user management, group of roles management, system configuration and security auditing. The test result shows that this system runs smoothly and the performance is stable, efficient and multifunctional. The operation of this system is easy and the user interface is friendly. At last, the reliability and effectiveness of this system has been confirmed.So far, this system'has been successfully used in Bureau of Industry and Commercial, national and local tax collect agencies, police stations etc. As a result, the resource among different governmental departments is under unified and secured management. And the efficiency of governmental agencies has been improved a lot.