【摘要】：互聯(lián)網(wǎng)技術(shù)的不斷發(fā)展推進(jìn)了各大企業(yè)走向信息化時(shí)代,越來(lái)越多各式各樣的系統(tǒng)應(yīng)運(yùn)而生。為企業(yè)帶來(lái)巨大便利和利益的同時(shí)也帶來(lái)了一些安全方面的隱患。訪問(wèn)控制的地位日益重要,成為各大系統(tǒng)中不可或缺的部分。 中藥溯源系統(tǒng),通過(guò)計(jì)算機(jī)網(wǎng)絡(luò)技術(shù)將中藥藥材的種植過(guò)程,銷售過(guò)程進(jìn)行詳細(xì)的記錄與跟蹤。由于中藥溯源系統(tǒng)的特殊性,它對(duì)用戶權(quán)限要求更加嚴(yán)格。必須盡可能的降低人為因素造成的干擾,權(quán)限控制系統(tǒng)顯得愈發(fā)重要。傳統(tǒng)的基于角色的訪問(wèn)控制(RBAC)模型很難適應(yīng)中藥溯源系統(tǒng)對(duì)權(quán)限的安全需求。因此,有必要對(duì)傳統(tǒng)的RBAC模型進(jìn)行改進(jìn),以提高權(quán)限管理的靈活性。 本文在開(kāi)發(fā)中藥溯源系統(tǒng)的同時(shí),對(duì)傳統(tǒng)的訪問(wèn)控制相關(guān)知識(shí)進(jìn)行了深入的研究,重點(diǎn)分析了傳統(tǒng)的RBAC模型,提出了對(duì)傳統(tǒng)RBAC模型的改進(jìn)方法。本文的主要內(nèi)容如下： 1.首先介紹了三種訪問(wèn)控制策略：自主訪問(wèn)控制、強(qiáng)制訪問(wèn)控制和基于角色的訪問(wèn)控制。對(duì)比了三者的優(yōu)缺點(diǎn),著重介紹基于角色的訪問(wèn)控制策略,確定其更適合中藥溯源系統(tǒng)的開(kāi)發(fā)需求。分析了傳統(tǒng)的RBAC模型在中藥溯源系統(tǒng)中應(yīng)用的不足,并且給出了相應(yīng)的解決方案。 2.結(jié)合中藥溯源系統(tǒng)的使用特點(diǎn)以及RBAC模型的基本原則,引入“對(duì)象維度”、“組時(shí)間維度”以及“時(shí)限自主授權(quán)”的概念,并對(duì)該改進(jìn)模型的特點(diǎn)進(jìn)行闡述。 3.在RBAC改進(jìn)模型的基礎(chǔ)上,設(shè)計(jì)并將其應(yīng)用于某中藥企業(yè)的溯源系統(tǒng),最后,給出了RBAC改進(jìn)模型在實(shí)際業(yè)務(wù)系統(tǒng)中的應(yīng)用效果。
[Abstract]:With the continuous development of Internet technology, more and more kinds of systems emerge as the times require. It not only brings great convenience and benefits to enterprises, but also brings some hidden dangers in security. Access control is becoming more and more important and has become an indispensable part of the major systems. Traceability system of traditional Chinese medicine, through computer network technology, the planting process and sales process of traditional Chinese medicine are recorded and followed in detail. Due to the particularity of the traceability system of traditional Chinese medicine, it requires more strict user rights. The interference caused by human factors must be reduced as much as possible, and the authority control system is becoming more and more important. The traditional role-based access control (RBAC) model is difficult to adapt to the security requirements of the traceability system of traditional Chinese medicine. Therefore, it is necessary to improve the traditional RBAC model in order to improve the flexibility of authority management. In this paper, while developing the traceability system of traditional Chinese medicine, the related knowledge of traditional access control is deeply studied, the traditional RBAC model is analyzed, and the improved method of traditional RBAC model is put forward. The main contents of this paper are as follows: 1. Firstly, three access control strategies are introduced: autonomous access control, mandatory access control and role-based access control. This paper compares the advantages and disadvantages of the three, mainly introduces the role-based access control strategy, and determines that it is more suitable for the development requirements of the traceability system of traditional Chinese medicine. The shortcomings of the traditional RBAC model in the traceability system of traditional Chinese medicine are analyzed, and the corresponding solutions are given. two銆，

本文編號(hào)：2502304