CAJ | 학술논문

为了解决基于角色的访问控制(RBAC)模型开发的内容管理信息系统向SOA架构切换，其中访问控制部分也需要转成更适应于分布式架构的基于属性的访问控制(ABAC)模型。该文对比研究了RBAC模型和ABAC模型两种授权模型，分析如何把已有的信息系统从RBAC模型转化成ABAC模型，为解决分布式环境提供了一种新途径，实现了RBAC模型到ABAC模型的平稳过渡，而不是完全推倒重建。
위료해결기우각색적방문공제(RBAC)모형개발적내용관리신식계통향SOA가구절환，기중방문공제부분야수요전성경괄응우분포식가구적기우속성적방문공제(ABAC)모형。해문대비연구료RBAC모형화ABAC모형량충수권모형，분석여하파이유적신식계통종RBAC모형전화성ABAC모형，위해결분포식배경제공료일충신도경，실현료RBAC모형도ABAC모형적평은과도，이불시완전추도중건。
In order to solve the switchover from a content management information system based on role-based access control (RBAC) model to a SOA architecture, the access control part needs to turn into the attribute-based access control (ABAC) model more suitable for distributed architecture. This paper comparatively studies two authorization models of both RBAC model and ABAC model, and analyzes how to turn existing information systems from the RBAC model into ABAC model. The result presented in this paper indicates that the smooth transition from RBAC model to ABAC model can be achieved, rather than demolishing and reconstructing.