Research Of Decoupled Privileges Management Based On RBAC

The traditional rights management subsystem has poor reusability and robustness. Itshould be repeated in different information systems and then lead the research anddevelopment costs rising. Therefore, how to separate the rights management from thebusiness applications of the specific information system is an urgent problem to be solved ininformation system development.Based on the RBAC permission model, with MSMQ message middleware forinformation transfer media and COM for realization carrier, an independent rightsmanagement component was constructed. It mainly contains three parts, the applicationintegration component, the authority server configuration module and the MSMQ applicationserver configuration. The application integration component is embedded into the host systemfor data exchange with permission subsystem. The server configuration module is responsiblefor receiving permissions of the administrators and is pushed to the MSMQ server. TheMSMQ application server is a bridge which connects the server configuration module and theapplication integration component. It stores the encrypted permission data and pushes them tothe appropriate integration component of the specific host system. The proposed componentcan be easily integrated into an information system and can avoid repeated construction. Itcan reduce the development costs and promote the security, robustness and effectiveness ofthe rights management.An example system was developed in this paper. It indicates that the developedcomponent is easy to use and has high reusability. It also shows the characteristic of intuitive,scalability, role based and changeable permission. The design model of the proposedde-coupled rights component also provides a approach for developing the rights managementsubsystem.