Authorization management system oriented to resource management and establishing method

Abstract

The invention provides a privilege management system facing resource management and an establishing method thereof. The system comprises a privilege management subsystem and at least one resource management subsystem connected with the privilege management subsystem. The privilege management subsystem is used for setting roles in the privilege management subsystem and transferring the roles to the resource management subsystem; and the role with access privilege is granted to a user according to the user information. The resource management subsystem is used for collecting and managing the resources; and the access privilege is granted to the role transferred from the privilege management subsystem according to the resources, and the privilege result is fed back to the privilege management subsystem. The resource management function is isolated from the privilege management by means of the resource management and privilege of the resource management subsystem, which allows the resource owner to complete the privilege control of the resources. Additionally, based on the physical classification and the logic classification of the privilege management system facing resource management, the decentralized management of access authority is achieved, the efficiency of resource allocation and management is increased, and the security of the information system is improved by reasonableprivilege management.

Description

technical field [0001] The invention relates to the field of information technology, in particular to an authorization management system oriented to resource management and its establishment method. Background technique [0002] With the rapid development of computer technology and network technology, more and more companies, governments, and campuses have begun to establish their own information systems, and realize information exchange and sharing by connecting to the Internet. [0003] However, the resources provided by some information systems provide services for target users, and different users should have different access rights to information system resources, especially in large-scale network environments. The number of users is becoming larger and larger, how to conduct reasonable and effective authorization management for users is becoming more and more important for the security of information systems. [0004] In terms of authorization management, at present, ...

AI Technical Summary

Problems solved by technology

[0005] The defect of the authorization management system in the PMI system is that the management of resources, granting access rights to roles and granting roles with access rights to users are all completed by the attribute authority, but the attribute authority is usually not the owner of the resource and cannot understand all resources Therefore, it is not possible to grant appropriate access rights to roles directly based on the attributes or requirements of resources, which not only reduces authorization efficiency, but also brings security risks to information systems.

Images