Design And Implementation Of RBAC Scheme For Secure NAS Access Of Small And Medium Enterprises

The application of network brings convenience to people's daily life and work.With the increase of network capacity and the acceleration of network speed,the application of network storage service is increasingly extensive.A series of network storage service providers develop rapidly such as Baidu Cloud Storage,but the service cost is usually high,and the privacy of storage is not good,access speed is limited by the internet service provider.Therefore,in order to save cost and improve privacy,some enterprises choose to set up their own network storage to meet the demand,but with the system planning and management problems,such as efficiency and security issues.To solve these network security problems,people pay more and more attention to the hierarchical protection technology of information system.Information system security level protection,is the information security products used in the information system according to the level of management,the information security incidents occurred in the information system classification response,disposal of the relevant technology.Since the beginning of the 21st century,China has successively introduced a number of laws,regulations and standards related to the hierarchical protection of information systems to guide the development of relevant technologies and the implementation of the hierarchical protection of information system security.RBAC is an information system access control model.The standard RBAC model divides the system into five parts:subject,object,role,operation and session.By distinguishing role permissions,binding different roles for different users to achieve more flexible system permission management.In this paper,from the accidents of hierarchical protection to the network storage security found,in view of the small and medium-sized enterprise network storage system based on the NAS architecture security problems,the use of RBAC role for security permissions hierarchy,explore design a security access scheme based on RBAC and NAS architecture,and the scheme on Windows Server 2016 system implementation and verification.