基于XML和XACML的角色访问控制的实施

Implementation of Role Based Access Control on XML and XACML

XML具有良好的扩展性、平台无关性、结构化数据描述能力,而XACML具有很强的访问控制策略描述能力。针对XML和XACML的特点,本文提出了使用XML和XACML实现基于角色的访问控制方案,使得RBAC系统具有了良好的灵活性、扩展性以及跨平台性。

XML is a document markup language which is of good extensibility,independence of platform and ability to describe structural data,and XACML is an access control policy language which is of powerful ability to describe access control policy.Based on the features of XML and XACML,this paper presents a way to implement Role-based Access Control(RBAC)by using XML and XACML,which greatly improves RBAC's flexibility,extensibility and independence of platform.