CAJ | 학술논문

为了满足面向服务的空间数据框架对空间访问控制的需求，提出多粒度的时空相关访问控制模型MSTAC。此模型在基于角色的访问控制模型基础上，进行属性约束扩展。属性约束包括上下文时间属性、用户的位置属性、角色的时间属性约束、地图类的图层向量约束、图层的尺度及制图时间约束、地物要素间的拓扑约束、地物要素的语义属性约束以及要素视图的字段约束。通过此模型，授权用户将受控访问不同粒度的空间数据集。这些粒度包括地图粒度、图层粒度、要素对象粒度和要素视图粒度。最后，将MSTAC模型在web GIS中实施。该实例显示了在不同的数据粒度上和不同的时间段内，系统可以对不同粒度服务进行肯定和否定授权。
위료만족면향복무적공간수거광가대공간방문공제적수구，제출다립도적시공상관방문공제모형MSTAC。차모형재기우각색적방문공제모형기출상，진행속성약속확전。속성약속포괄상하문시간속성、용호적위치속성、각색적시간속성약속、지도류적도층향량약속、도층적척도급제도시간약속、지물요소간적탁복약속、지물요소적어의속성약속이급요소시도적자단약속。통과차모형，수권용호장수공방문불동립도적공간수거집。저사립도포괄지도립도、도층립도、요소대상립도화요소시도립도。최후，장MSTAC모형재web GIS중실시。해실례현시료재불동적수거립도상화불동적시간단내，계통가이대불동립도복무진행긍정화부정수권。
The multi-granularity spatial-temporal-related access control (MSTAC) model was proposed to meet the spatial access control requirements for the service-oriented spatial data infrastructure (SDI). MSTAC extends the attribute constraints of role-based access control (RBAC), which includes the user’s location attribute, the role’s time constraint, the layer vector constraint of a map class, the scale and time constraints of a geographic layer, the topological constraints of geographic features, the semantic attribute expression constraints of geographic features, and the field constraint of feature views. Through this model, authorized users would be limited to access different granularity spatial datasets, such as the map granularity, the graphic layer granularity, the feature object granularity and the feature view granularity. Finally, the MSTAC model is achieved in a web GIS, which shows the positive and negative authorizations to different services in different data granularities and time periods.