一个基于角色的Web安全访问控制系统

A Role-Based Web Security Access Control System

对基于角色的访问控制模型进行了分析并定义了相关的概念 ,给出了实现模型和算法设计 ;对现行的Web安全认证和访问控制中存在的问题和隐患进行了分析 ,给出了一种新的可行的安全解决方案 ;最终实现了一个基于角色访问控制策略的Web资源安全管理系统 ,它在实际应用中取得稳定、可靠和有效的结果 .

A role-based access control model is analyzed and the related concepts are defined. The implemented model and algorithms are presented. A new feasible security solution is provided for the problems existing in the authentication and authorization on web application. As a result, a web security management system is implemented by using the role-based access control model. The system has sound, stable and valid performances of application in real environments.