基于角色的访问控制在校园网管理系统中的应用研究

Role-Based Access Control Application in Campus Network Management System Research

摘要: 访问控制一直是信息安全的重要保证之一。基于角色的访问控制(Role-Based Access Control, RBAC)也是目前研究应用广泛的一种访问控制模型。为了保证系统的数据安全，严格区分各用户对系统访问的功能和权限的基础上，本文提出在基于角色的访问控制中与校园网组织结构相一致的安全策略，重点阐述所采用的基于角色的用户访问控制，并在数据库中增加角色对数据表中每一项的访问权限表应用于西北民族大学校园网，可提供一个灵活稳定又安全的校园网络环境。

Abstract: Access control has been an important guarantee information security. Role-Based Access Control (RBAC) is currently widely used as a research application access control model. To ensure the security of the data in the system, based on the distinction among the individual user’s access to system as well as to the function of the system, this article proposes the security strategy which is consistent with the campus network organizational structure. It puts stress on the role-based user access control; and in the database, the role’s access authority to every item in the data table applied to the Northwest University for Nationalities campus network is also increased. Thus a flexible and stable campus network environment is provided.