CAJ | 학술논문

提出一种新的基于AOP技术的RBAC访问控制模型，是对传统RBAC访问控制模型的改进，突破了传统RBAC模型中不具备对细分数据的访问控制的限制。同时，本文根据面向对象技术对不同种类的细粒度进行了有效抽象，采用现有JavaStruts2和AOP技术进行了软件架构的设计，这种模型是一种通用的细粒度访问控制模型。本文所得出的细粒度RBAC模型具有较强的通用性，并在实际系统中得到了验证，取得了良好的效果。
제출일충신적기우AOP기술적RBAC방문공제모형，시대전통RBAC방문공제모형적개진，돌파료전통RBAC모형중불구비대세분수거적방문공제적한제。동시，본문근거면향대상기술대불동충류적세립도진행료유효추상，채용현유JavaStruts2화AOP기술진행료연건가구적설계，저충모형시일충통용적세립도방문공제모형。본문소득출적세립도RBAC모형구유교강적통용성，병재실제계통중득도료험증，취득료량호적효과。
An effective approach for fine-grained RBAC model by using AOP is proposed. The proposed approach strengthens the traditional RBAC which is unavailable for fine-grained data in a system. The proposed approach can effectively accomplish the general role-based access control functions among enterprise application systems. In addition, the proposed approach abstracts various fine-grained data by using object-oriented methodology. This approach focuses on the fine-grained access control which is implemented by using interceptor technique of Java Struts2. We also present the related architecture and applied system for a verification of this proposed approach.