用基于RBAC的方法集成遗产系统的访问控制策略

Using RBAC-based Approach to Integrate Access Control Policies in Legacy Systems

访问控制是软件系统的重要安全机制,其目的在于确保系统资源的安全访问。针对多数遗产系统的访问控制不是基于角色的且其实现形式多样,提出了一种基于RBAC的访问控制策略集成方法。该方法将遗产系统中的权限映射为集成系统中的任务,能够在任务树和策略转换规则的基础上使用统一的形式重组访问控制策略。此外,该方法给出了一组用于实现后续授权操作的管理规则。案例分析表明,提出的方法是可行的,能够有效地集成遗产系统的访问控制策略,并将RBAC引入遗产系统的访问控制。

Access control whose objective is to ensure the security of accessing to resources in software systems is an essential part for software systems.As access control policies in legacy systems seldom based on roles are represented in various forms,an RBAC-based approach was proposed to integrate these access control policies.The approach maps permission of legacy systems to tasks of integrated system.Based on task trees and transformation rules of access control policy,various access control policies were reorganized in a unified form.Moreover,management rules were provi-ded to achieve further authorization.A case study is demonstrated to depict the proposed approach is a feasible solution to integrate legacy access control policies and introduce RBAC into legacy systems.