Application Of A Model Based On Role Access Control

With the further improvement of the requirements to the businesstransaction processing.The centralized storage model has been unable to meetthe demand of enterprises for timeliness and interaction of information.Inorder to better meet the needs of business enterprises for the next generationInternet,to really realize the autonomy and independence on Internet,thedistributed system engaged. Distributed system is a new distributedcomputing model,based on a series of open standard technologies.It is theframework of the next generation e-commerce.The key to the successfuldevelopment of distributed system is its security problems.And access controlis an important way to solve security problems.In this thesis.First,we introduced the background,generation,currentstatus,applications and advantages of Role-based Access Control,and thenanalyze some RBAC classical model,compare it with traditional accesscontrol scheme.Then, this thesis introduced and analyze the application ofRole-Based Access Control technology in distributed system.Regarding thedistributed systems,secure interoperability between multi-domains is the keyaspect guaranteeing the systems’security.The essential of secureinteroperability between multi-domains is authorizing the users in foreigndomain to get the permission of original domain.IRBAC2000model definesthe role mapping between two domains and solves the problem of mappingroles in foreign domain to roles in original domain.Howerve,there are somesecurity programs in IRBAC2000model.Acrossing to partial securityprograms in IRBAC2000model, this thesis puts forward a improvedIRBAC2000model.Finally，this thesis design a prototype systems, and thenapply the improved IRBAC2000model in the prototype systems, analyze thefeasibility and the practicability of the improved model.