一种基于PERMIS PMI的安全访问控制的设计

为实现某型装备远程维修技术支援系统中资源的访问控制,保证系统数据安全,设计了基于PERMISPMI的安全访问控制方法,通过对业务层的合理构建和对主体、客体以及相应动作的访问控制策略配置,实现了由角色代替用户对资源进行访问。实践证明,基于PERMIS PMI的访问控制方法在系统中起到了良好的作用并降低了维护工作的强度。

Design of a Secure Access Control based on PERMIS PMI

To achieve access control in a remote technical support system for equipment and ensure the security of the data,this paper designs a secure access control method based on PERMIS PMI.The roles instead of the users access to resources is implemented by the reasonable design for the business layer and the access control policy configuration to the objects,subjects and their corresponding actions.It has been found that access control method based on PERMIS PMI in the system plays a positive role and reduces the intensity for maintenance.