Access control system and method based on resource publisher's customization

Abstract

The invention discloses a user-defined access control system and method based on a resource publisher. The system comprise an access control interface module, a role-resource mapping rule management module, a user-role mapping rule management module, an authority judgment module and a role authority management module, wherein the access control interface module is used for providing a configuration and query interface relevant to the access control; the role-resource mapping rule management module is used for a mapping rule between a management role and the resource; the access control interface module is used for receiving an association rule between a specific-format role and the resource and storing the association rule to an access control database; the user-role mapping rule management module is used for managing an association rule between a user and the role; the access control interface module is used for receiving an association rule between a specific-format user and the role and storing the association rule to the access control database; the authority judgment module is used for judging the access authority of the user by accessing a mapping rule stored in the access control database according to the authority judgment request of the user; and the role authority management module is used for creating a management role and appointing the access authority to the resource associated with the role.

Description

technical field [0001] The invention relates to the communication field, in particular to a fine-grained access control system and method that can be customized by resource publishers in a resource open business system. Background technique [0002] Access control refers to the ability to allow or prohibit a subject from accessing an object. In computer systems, access control refers to the ability to restrict the access rights of subjects (initiators of access, generally users, processes, applications, etc.) to objects (resources or resource collections that can be accessed and need to be protected), so that The ability to enable a computer system to be used within legal limits. The access control mechanism determines which subjects can access the system, what resources of the system can be accessed, and how to use these resources. [0003] The existing access control mechanisms mainly include: discretionary access control, mandatory access control, role-based access cont...

AI Technical Summary

Problems solved by technology

[0011] The technical problem to be solved by the present invention is to provide an access control system and method based on the resource publisher's customization, so as to overcome the problem that the existing access control system is applied to ubiquitous networks, WEB2.0, etc., which are user-centered and users participate in resource sharing. In the open business system generated by business and business, resources cannot independently formulate resource-oriented access control rules of different granularities

Images