訪問(wèn)控制是現(xiàn)代企業(yè)信息系統(tǒng)設(shè)計(jì)的核心，它控制用戶(hù)行為，保護(hù)系統(tǒng)資源的安全。
傳統(tǒng)的訪問(wèn)控制模塊的設(shè)計(jì)與應(yīng)用系統(tǒng)緊密耦合，使其無(wú)法得到很好的復(fù)用。本文介紹了輕量級(jí)目錄訪問(wèn)控制協(xié)議(Lightweight Directory Access Protocol，簡(jiǎn)稱(chēng)LDAP )和基于角色的訪問(wèn)控制基于角色的訪問(wèn)控制(Role-based Access Control，簡(jiǎn)稱(chēng) RBAC)模型，基于它們?cè)O(shè)計(jì)了一個(gè)高效、安全的訪問(wèn)控制系統(tǒng)。該系統(tǒng)在省郵政綜合服務(wù)平臺(tái)中的到應(yīng)用，有效解決了原有系統(tǒng)設(shè)計(jì)中的一些弊端。
關(guān)鍵詞：輕量目錄訪問(wèn)協(xié)議；基于角色的訪問(wèn)控制；權(quán)限管理；系統(tǒng)集成
Abstract: Access control plays an important role in the enterprise application system. It is used to control the user’s behavior, and to ensure the safety of system resources. Conventionally, access control module is tightly integrated into the application system, which makes it difficult to reuse the access control module in the new systems. Re-developing the access control module under this condition will cause data redundant, which will make it difficult to maintain the base information and make the whole enterprise application systems unsafe. With the study of Lightweight Directory Access Protocol (LDAP) and Role-based Access Control (RBAC), we present the design of a secure access control system in this paper. The system is employed into the province’s postal services platform. It is shown that it can successfully solve these problems.
Keywords: lightweight directory access protocol; role-based access control; authorization; system integration