General Framework In The Context Of The Rb-rbac-based Design And Its Applications In Health Care Management

With the development of networking technology, security challenge of information system become much more swelled. The Role-Based Access Control (RBAC) is important content of information security technology, development of RBAC force information system security. The Context Based RB-RBAC model is up to date production of RBAC technology, it ameliorate efficiency and complexity which has been defect of RBAC. Recently, there is not has a mature method to realize the Context Based RB-RBAC model. A current software framework of the Context Based RB-RBAC model's realization will force RBAC technology advance, and importantly affect information system security.Take the context based RB-RBAC model as the basics of this paper, and be assisted by the Object Oriented Framework (OO Framework) technology, a OO Framework development solution of realize the Context Based RB-RBAC model to be used compatibly in any information system software is brought up. This paper out and out analyzes some question we have found such as: in order to resolve question of transform the attribute of user and role into attribute object, an object frame analyzed all of condition that attribute may has to express attribute be advanced; technical of authorization-policy configuration in virtue of XML and method that how it worked to distribute permission are put forward to settle automatic authorization question; this paper also advances authentication method that apply to all kinds of authentication mode needed by different information system.Finally, taking medical insurance system as instance and OO Framework of the Context Based RB-RBAC model as module of permission management, this paper designs a prototype system. It proves that the OO Framework of the Context Based RB-RBAC model is universal and effective by system testing.