ASP服务平台访问授权策略研究

Research on the access authorization strategy of ASP service platform

根据网络化制造ASP服务平台对访问控制的需求,讨论几种传统的访问控制模型及其优缺点,重点分析基于角色的访问控制。提出一种基于角色的访问控制(RBAC),并结合基于任务,基于公司关系,给予企业联盟的访问控制模型而构建的综合访问控制模型。

Several traditional access control models are discussed based on the requirements of ASP application service platform. And the role based access control is analyzed particularly. At last, a compositive access control model based on the Role Based Access Control（ RBAC）, task-based access control, corporation relation and enterprise allied access model is put forward.