bs架构下rbac访问控制模型设计与实现word格式论文.docxVIP

AbstractWith the rapid development of mobile Internet application technology, the Browser/Web Server/DB Server three-layer architecture which had developed based on the Internet technology has become more and more popular. But the technical feature of the structure of the B/S architecture also leads to some information security issues when being used in the open Internet environment. Access control technology has always been a main technology among those that guarantee information security. So finding out the most suitable access control technology that could be used in the B/S architecture has become the focus of the research during these years.This Thesis put forward an idea that using theory of the Role-Based Access Control model to solve the access control issue of B/S architecture. And analysis and compare the RBAC96 model and other extended RBAC model that had been put forward by researchers at home and abroad. Summarize the advantages and disadvantages of all kinds of models.Combining with the design theory of different RBAC models and the request of access control of the B/S architecture, put forward a new extended RBAC model called BI-RBAC that based on Business and Interface. And give the detail information of the model from the aspects about model design, the definition of elements and constrains. Establish the permissions allocation strategy and access authentication mechanism of the new model.Analyze the subject and object of access control and characters of the BI-RBAC model. Intensively study the software framework that implements the model under B/S architecture. Suggest using the MVC4.0 software design framework to realize the BI-RBAC model. And give the detail information about how to realize the mainly entities of the BI-RBAC model in the MVC4.0 framework.By MVC4.0 framework, apply the model to a new Manufacturing Execution System which based on B/S Architecture. Give the detail information of the applied principle of the model. Display the inter