CORBA安全中的访问控制策略研究

Research of access control in CORBA

针对CORBA安全服务需要解决的访问控制问题 ,在分析了CORBA安全服务的基础之上 ,将基于角色的访问控制策略引入其中 ,不仅充分利用了CORBA现有的策略对象服务 ,而且通过设计和定义新的管理对象接口提出了一个对象调用服务策略层上的访问控制模型 ,并结合该模型给出了RBAC在CORBA安全访问控制中的阶段式授权流程 。

An access control model by implementing Role-based Access Control (RBAC) into CORBA on the basis of analyzing the security services as the security components of the middleware in CORBA was proposed. In this model, the object services in CORBA were used fully, and new object interfaces of management designed and defined. The process of gradual authorization under the model was briefly depicted and illustrated by the flow chart.