Design and storage method for resource and its access control policy in high-performance access control system

An access control strategy and access control technology, applied in computing, computer security devices, instruments, etc., can solve problems such as affecting system performance, affecting system performance and concurrent access capability, etc.

Inactive Publication Date: 2008-06-11
ZHEJIANG UNIV
View PDF0 Cites 40 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Some existing products store all authorization policies in a policy certificate, and read and write the same certificate every time access control or resource access policy is formulated, which affects system performance and concurrent access capabilities
Other products use the policy certificate issued by the authority and the use condition certificate issued by multiple managers to jointly perform access control; when performing access control, it needs to read all the use condition certificates, which also affects the performance of the system

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Design and storage method for resource and its access control policy in high-performance access control system
  • Design and storage method for resource and its access control policy in high-performance access control system
  • Design and storage method for resource and its access control policy in high-performance access control system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0020] The present invention will be further described below in conjunction with accompanying drawing and embodiment:

[0021] Combined with specific applications to describe the specific implementation process of the access control system:

[0022] 1. Construct the personnel organization structure of the enterprise

[0023] Figure 1 describes the personnel organization structure of the enterprise. The personnel organization adopts a single root tree structure, and departments and products can be set under the root node. Sub-departments and sub-products can be set up under a department, and only sub-products can be set up under a product. On the basis of the organizational structure, two roles, administrative and product, are provided, which are called the administrative role (AdminRole) and the project role (ProjectRole). Each department can provide several administrative roles, and each product can provide several product roles. Each user can be assigned one or more roles...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention relates to a method of managing distributed file system with multi-duplicates, adopting a frequency-based duplicate management mechanism. According to information trends of the frequency of the files which are read, written, and visited as well as the source of visit, the status of the file duplicates is changed. Through the dynamic increase and decrease of the number of duplicates and the change of storage position, specifically including duplicate granularity management, duplicate creation strategy, duplicate selection and position, and duplicate consistency management. The method of creating duplicates of files comprises creation initiated by a user and creation initiated by nodes, adopting data grid and strategy based on motivation of profits. The duplicate position supply maps a logical file onto a proper duplicate and provides the user with a duplicate at the minimum cost and of the maximum visit efficiency. The present invention has the advantages that: services provided continue the favorable attributes of a distributed file system, including loose coupling, high availability, high reliability and high cost-effectiveness.

Description

technical field [0001] The invention relates to the field of computer information security, and mainly relates to a method for designing and storing resources and access control policies in a high-performance access control system. Background technique [0002] At present, many large enterprises have increasing requirements for the performance and concurrency of access control systems, which put forward higher requirements for the storage of resources and authorization policies in access control systems. The number of resources in modern enterprises is often massive, and resource authorization policies are complex. Therefore, how to manage and store distributed resources and their policies to ensure access performance suitable for enterprise-level applications is one of the important issues in access control systems; at the same time, access control The system should be able to adopt a unified strategy for unified management of distributed resources to ensure the reasonable ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06Q10/00G06F21/00G06F21/44
Inventor 李莹殷昱煜吴健邓水光尹建伟吴朝晖
Owner ZHEJIANG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap