基于RBAC的电子政务权限访问控制模块的设计与实现

电子政务系统庞大,涉及到的机构、地域、人员繁多,而且国家的政策法规还处于不断完善中,很可能需要不断的调整权限控制系统,所以对权限管理模块的易维护和易扩展性提出很高要求.RBAC访问控制技术,引入角色的概念,使得用户、权限管理条理化,减少授权管理的复杂性,支持用户数量和子系统数量、功能的无限增加,满足系统扩展性要求.利用RBAC技术,可以实现国家集中控制权限系统,各机构自主分配角色.

Design and realization in E-government system based on RBAC theory

The E-government system is a voluminous system which concerns many departments,districts and people.Since the national policies and statutes still keep perfecting,the high criterion requirement for the easy-maintenance and easy-expansibility is necessary in the authority management module.The RBAC access control technology makes the user and the authority management methodic by introducing the conception of roll.Meanwhile,the complexity for the authorization management is decreased;the function development without limitation is supported and quantity of user and sub-system is larged;the requirement of system expansibility is satisfied.By applying the RBAC technology,nation control the authority system while the departments assign the rolls independent.