CAJ | 학술논문

本文针对张家峁矿业公司数字化矿井建设需要建立Portal门户。阐述了portal门户给公司带来益处的同时并探讨了portal的访问控制问题，具体采用了PKI与RBAC的访问控制模型解决了相同安全域内的访问控制，采用Spring MVC技术作为RBAC的实现，达到不需要在应用系统中编写任何代码来达到保护应用系统的目的。最后设计了一种不同安全域间访问控制的动态机制以及策略、角色、授权信息的具体设施。实现了基于RBAC或ACL的不同安全域之间的访问控制。将访问控制从系统业务逻辑当中分离，进而增加了系统的灵活性和扩展性。
본문침대장가묘광업공사수자화광정건설수요건립Portal문호。천술료portal문호급공사대래익처적동시병탐토료portal적방문공제문제，구체채용료PKI여RBAC적방문공제모형해결료상동안전역내적방문공제，채용Spring MVC기술작위RBAC적실현，체도불수요재응용계통중편사임하대마래체도보호응용계통적목적。최후설계료일충불동안전역간방문공제적동태궤제이급책략、각색、수권신식적구체설시。실현료기우RBAC혹ACL적불동안전역지간적방문공제。장방문공제종계통업무라집당중분리，진이증가료계통적령활성화확전성。
In this paper,according to Zhang Jia Mao mineral company digital mine construction needs to establish the Portal portal.The portal portal to bring benefits and discusses the problems of access to portal,the PKI and RBAC access control model to solve the same security domain access control,using Spring MVC technology as the implementation of RBAC,to do not need to write any code in the application system to protect application system the purpose of.Finally designs a dynamic mechanism of different security of the inter domain access control strategy,and specific facilities,role authorization information.Realized between different security domains of RBAC or ACL based access control.The access control is separated from the business logic,thereby increasing the flexibility and scalability of the system.