面向电子政务的访问控制技术研究-智能与分布计算实验室

面向电子政务的访问控制技术研究

姓名	朱海军
论文答辩日期	2008.06.05
论文提交日期	2008.06.12
论文级别	硕士
中文题名	面向电子政务的访问控制技术研究
英文题名	Research the technology of Access Control for E-Government
导师1	李瑞轩
导师2
中文关键词	电子政务;E-RBAC;互操作;集成;Web服务
英文关键词	E-government;E-RBAC;Interoperation;Integration;Web Service
中文文摘	随着计算机技术和网络技术的发展，电子政务迅速地在各国得到广泛应用。然而，来自网络、单位内部的安全威胁严重制约着电子政务的发展。访问控制是网络安全的一个重要组成部分，在保障电子政务信息的完整性、保密性和可用性方面发挥着重要作用。然而随着电子政务系统越来越庞大，传统的访问控制策略效率低下且容易出错，同时，电子政务本身的特点也决定了传统访问控制模型不能很好的满足其对访问控制的特殊需求。因此，研究面向电子政务的访问控制模型具有一定的理论意义和应用价值。从实际应用角度出发，对RBAC授权形式进行扩展，根据政府行政部门的实际特点，将用户、角色赋予相关的部门，同时针对角色、部门进行授权，给出一种更适合于电子政务环境的扩展模型E-RBAC。在该模型中，角色放入部门中管理，从而使得具有相同语义的角色其权限关系直截了当，并且由于部门是政务组织中自然存在的属性,无需抽象定义,从而使得授权流程更加清晰,操作过程也十分简便。同时，由于电子政务环境中存在着许多跨应用系统的协作办公需求，针对此种情况，通过角色映射机制建立基于E-RBAC的互操作模型，并通过统一授权模式解决电子政务中应用系统的集成与跨域互操作。在湖北省电子政务统一权限管理平台的设计和实现过程中，利用E-RBAC扩展模型进行设计，通过在平台上提供Web服务组件以及角色映射策略实现了各应用系统的集成和跨域互操作，最后对系统的性能测试，验证了本系统在实际应用中的可行性。
英文文摘	With the development of the computer technology and network technology, the E-government affairs rapidly obtain the widespread application in many countries. However, from the network, inner departments’ security threats seriously restricting the development of E-government. Access control is an important component of network security, in the protection of information integrity, confidentiality and availability of E-government plays an important role. However, along as the hugeness of E-government, traditional access control strategies have low efficient and make mistakes easy, at the same time, the characteristics of E-government determined that traditional access control models can’t meet the special requirements. Therefore, the study of small granularity based on the access control has a certain theoretical and practical significance. According to the characteristics of government department, this paper extends authorization of RBAC through users and roles are assigned to related departments, authorization based on roles and departments., and proposes a new extended model named E-RBAC which can more suitable for e-government environment. At the same time, this paper establishes an interoperation model based on E-RBAC using role mapping policy and gives unified authority strategies to solve the application systems of e-government integration and cross-domain interoperation. In the process of design and implement of Hubei province unified permission system, we deploys E-RBAC and extend models for designing, and through web services components and mapping strategies provided by platform we achieve multi application system’s integration and cross-domain interoperation. The test of system's performance certificates the application feasibility of system.