摘要： 基于RBAC策略和CORBASec框架,引入对象访问的约束机制,给出了一种CORBA安全访问控制策略模型——GRBAC forCORBA(General Role-Based Access Control for CORBA)及其访问控制与决策过程。该模型在“基于中间件技术的分布嵌入式系统研究”中得到了实际应用,解决了分布式异构环境下域间访问控制的复杂性问题并且更易于实现企业级自定义安全策略。

关键词: 分布式对象系统, CORBA安全, RBAC, 访问控制, 访问决策

Abstract: The constraints of object access is introduced in the basis of RBAC policy and CORBASec frame.An access control model for CORBA,GRBAC for CORBA(General Role-Based Access Control for CORBA),is proposed,including its access control and decision processes.The model is applied in “distributed embedded system based on middleware technology”,and resolves the problem of access control between domains in distributed heterogeneous environment,it can realize self-defined enterprise security policy easily.

中图分类号: 

• TP311.52