CAJ | 학술논문

针对Web系统的特点以及其对用户访问控制的特殊要求,提出了在B/S结构下基于"角色-模块-页面模型"实现用户访问控制的基本思想,并讨论了其具体的实现方法."角色-模块-页面模型"以传统的RBAC权限管理模型为基础,将模块看作是一系列页面的集合,并以二进制数值来描述角色对各模块的访问权限以及各页面的操作功能,从而将用户对模块页面的操作权限判断转化为一系列的逻辑运算.通过在高速公路机电设备养护系统中的实际应用,表明提出的用户访问控制方法能够很好地满足企业对Web系统用户访问控制的要求,通用性好,扩展性强,配置简单灵活.
침대Web계통적특점이급기대용호방문공제적특수요구,제출료재B/S결구하기우"각색-모괴-혈면모형"실현용호방문공제적기본사상,병토론료기구체적실현방법."각색-모괴-혈면모형"이전통적RBAC권한관리모형위기출,장모괴간작시일계렬혈면적집합,병이이진제수치래묘술각색대각모괴적방문권한이급각혈면적조작공능,종이장용호대모괴혈면적조작권한판단전화위일계렬적라집운산.통과재고속공로궤전설비양호계통중적실제응용,표명제출적용호방문공제방법능구흔호지만족기업대Web계통용호방문공제적요구,통용성호,확전성강,배치간단령활.
Aimed at the characteristic of web system and its special demand in access control, a role-module-page model based fundamental idea of access control in B/S environment is proposed and then its implementation details are discussed. Based on traditional role-based access control model, role-module-page model treats a series of pages as module, describes the role's access permission of each module and the function of each page with binary values, so while the user access the pages, the user authentication can be finished by a series of logical operations. Through practical application in FM2E (maintenance system for freeway mechanical equipments), it indicates that the proposed access control method can satisfy enterprise's demand in access control of web system with good applicability, scalability and flexible configuration.