Web-based Service Authorization And Access Control, Research And Design,

This task comes from ?the system to keep secret for the information system in armyed police force(APF).? project. The purpose of this task is to give the access control and the authorization management service for all the subsystem in system for APF, to improve the safety of the information system system for APR With the development of the information technology, the WEB and the database system have been widely used. Furthermore, the data and the resource will be more and more widely shared in the future. So ,how to keep the resource not to be used by unwanted users have been a important question.There being no a criterion on the user authorization and the access control, there may be different user authorization and access control system in different system. So one user's authorization have nothing to the authorization in the others. These will influence the safety of the whole system. So ,there must be a uniform platform to realize the user authorization and access control ,to provide the uniform user authorization and access control service for all the other systems. Based on this demand, this task design an access control and authorization management system which is suitable for the APF information system used in the WEB. Realizing the access control through the role of the users, this system can give the authorization users a specifical action range, can give a definition and description to the authorization management, can provide a mapping from the user identity to his authorization.This system also realizing a access control mechanism which have nothing to do with the system development and management. this can Simplify the development and management of the access control and authorization management and can reduce the cost of management.with regard to the mechanism of authorization and access control management ,this paper make a presentation about the theory , the architecture ,and...