Rbac Prototype Based On Sdsi Specification And Realization

The rapid development of Internet has been promoting information exchanging and resources sharing. It is an important problem for resources holders to reasonably control accesses while ensuring sufficient sharing. RBAC (Role-Based Access Control) has attracted more and more attention in recent years. In the RBAC model, each intended user for a resource is mapped to a Role type, which is defined by the resources manager. And resources holders can set the access authority for each Role type based on different access control polices. This model significantly reduces the labor of resources holders in managing access authorities, and enhances the flexibility of configuring security policy.This paper presents Roleaccess-a prototype of RBAC systems based on RBAC infrastructure, which is implemented in Java. This prototype system can be run on different platforms. It is outstanding in friendly interfaces and flexible configuration, with other advantages such as ease of use. Such a system is very promising in facilities such as Web access control and database access control.