摘要： 基于角色的访问控制具有减少授权管理复杂性,降低管理开销,并能提供与企业组织结构相一致的安全策略的优势,(RBAC)RBAC模型是大型企业网实现授权访问的最佳方案。在介绍了基于的资源访问控制策略后,给出了一种在代理服务器中实现的原型/WebRBACWeb系统。

关键词: 访问控制, 信息安全, RBAC, Web

Abstract: Role-based access control(RBAC), which will reduce the complexity and cost of authorization managements, provides the role that is consistent with the structure in a corporation. RBAC for the Web(RBAC/Web) is the best scheme to enforce authorization policy on large Intranet. After introducing resource access policies through the RBAC for Web server, this paper provides how to set up the RBAC/Web model and gives an approach implementation in a Web reverse proxy.

中图分类号: 

• TP393.07