摘要： 设计实现了一个基于本体的权限管理系统,该系统使用本体对业务层面上与操作相关的信息进行概念建模,实现了一个对具有业务内涵的、范围相当广泛的一类广义操作进行权限定义、管理的合适的表达框架和管理机制。同时,该系统是独立于应用的,可以为多种应用程序提供统一的权限管理支持。

关键词: 权限管理, 授权, 访问控制, 本体, 拦截器

Abstract: This paper designs and implements an application-independent privilege management system. In the system, it introduces ontology into enterprise application level, which builds up concept model for activity-relevant information of application level, implements a suitable framework and management mechanism for generalized activities with application connotation and builds up corresponding formalized model. Meanwhile, the system is application-independent, which can support uniform privilege management for multiple application programs and disjoin application logic and authorization logic.

中图分类号: 

• TP311.52