Method for solving access control in authority management

Abstract

The invention provides a method for solving access control in an authority management. Based on the RBAC model access control technology, the method divides resource fine granularity into a function resource and a data resource and achieves a centralization management and an authorization to the resource, wherein the function resource is layered designed and realized according to the system, module, function and resource, and visiting sensitive business data is performed a flexible definition and a management by the data resource type management from the business view; finally the operation page authorization is finished by a client-role-function resource authority mode and the data authorization is finished by a client-data resource mode. The method of the invention realizes the security access control of the resource in the system, module, function and resource fine granularity, effectively enriches the authority management connotation, increases the authority control force, prolongs the management size, and improves the management aspect.

Description

technical field [0001] The invention relates to a computer application technology, in particular to a method for solving access control in authority management. Background technique [0002] Information is an asset that, like other important business assets, has value to an organization and thus needs to be properly protected, the issue of information security. Information security can be achieved by implementing a set of controls. These controls may be policies, practices, procedures, organizational structures, or software functions that are established to ensure that the organization's specific security objectives are met. [0003] Access control is one of the core strategies of information security. Its task is to ensure the legal use of system resources by limiting access to resources and preventing damage caused by intrusion by illegal users or inadvertent operations by legitimate users. The core of access control is the authorization strategy, that is, in order to li...

AI Technical Summary

Problems solved by technology

There are generally three types of traditional access control strategies: autonomous access control methods, mandatory access control methods, and role-based access control methods (RBAC), but none of the three can meet the requirements for resource diversity and multi-level access control in the current B / S environment. access control issues

Images