RBAC策略在CORBA分布式对象系统安全中的应用.PDF

31 20 2005 10 Vol.31 20 Computer Engineering October 2005 ·· 2005 A TP309.2 RBAC CORBA 471003 RBAC CORBASec CORBA GRBAC for CORBA(General Role-Based Access Control for CORBA) CORBA RBAC Application of RBAC Policy in CORBA Distributed Object System Security ZHANG Zhiyong, PU Jiexin (School of Electronic and Information Engineering, HAUST, Luoyang 471003) AbstractThe constraints of object access is introduced in the basis of RBAC policy and CORBASec frame. An access control model for CORBA, GRBAC for CORBA (General Role-Based Access Control for CORBA), is proposed, including its access control and decision processes. The model is applied in “distributed embedded system based on middleware technology”, and resolves the problem of access control between domains in distributed heterogeneous environment, it can realize self-defined enterprise security policy easily. Key wordsDistributed object system; CORBA security; RBAC; Access control; Access decision DACMAC RBAC Internet Intranet RBAC RBAC CORBASec CORBA RBAC GRBAC for CORBA RBAC RBAC96 NIST R