Research On Access Control For MIS Based On Cloud Computing

With the development of computer and Internet technology, the traditionalmanagement information system (MIS), due to the limitations of stand-alone mode, isbecoming unable to meet the modern society, cross-regional, multi-user collaborativework mode. This multi-user collaborative work mode makes the MIS very complex andcontains a huge system data, so the demanding for the hardware is very rigorous. Cloudcomputing technology is a good solution of this problem. It makes the computing as apublic service like water and electricity, so that the user can get the services on demand,expanding the range of application of the stand-alone mode. But, this mode also bring apotential threat to its data access security in the information system based on cloudcomputing platforms, system data store in third-party storage medium, so users have noabsolute management of the system data, This potential data security problems haveconstrained the further development of cloud computing technology.In order to solve the data access security issues in the cloud computingenvironment, we study on the workflow technology and access control model, and madesome improvements on TRBAC. The task-role-based access control model introducesthe concept of role in the role-based access control (RBAC) in task-based access control(TBAC)，The core idea is that users can get access permissions by obtain a role, but theauthorization step that contains the permissions should be activated, otherwise, thepermission of the role is unavailable. This model makes the assigns permissions moreflexible, and it also uses the "workflow" to restrain the "role", that changed the "subject-object" mode into an active defense mode, which make the model more suitable fordistributed computing environment.Role-task-based access control model is applied in the personnel managementsystem in this thesis, we set up a personnel information management system on thecloud computing platform to explore and practice platform as a service (PaaS). Wecreate a secure data access environment for the personnel information managementsystem by implementation of role-task-based access control model.