基于角色与属性的设备管理信息系统访问控制与实现

Research and Implementation of Access Control Service for Equipment Management System Based on Role and Attributes

随着高校设备采购数量的大幅提高,设备管理难度随之提升,基于三级建账管理方式应运而生。三级建账管理方式让最终设备用户参与到设备管理流程中,为设备管理信息系统增加了大量用户,如何保障大量用户访问设备管理信息系统的可用性、有效性和安全性成为亟待解决的问题。针对设备管理信息系统大规模用户访问问题,提出基于角色与属性的访问控制模型,介绍了访问控制模型的基本结构和工作原理,详细阐述了该模型通过角色指定和属性设置的方法在设备管理信息系统中实现即时有效的访问控制,说明了该模型的实现对设备管理服务能力的提升所起到的积极作用。

With the substantial increase of equipment purchasing quantity,the difficulty of equipment management in the university also increased,the tri-level management mode came into being at this time. The mode allows a number of users to participate in the equipment management processes. How to guarantee the availability,effectiveness and security becomes a serious problem. This article proposes the access control model based on role and attributes in equipment management system for the large scale users,and provides composition of the model. It also presents the features of the system based on the model and the promotion effect for system management service capability the model has had in detail.