基于rbac的脱耦权限管理研究-工程硕士专业论文.docxVIP

I I 摘 要 摘 要 传统的权限管理子系统在可重用性、健壮性方面存在不足，且由于在不同的信息系 统中需要重复构建，导致研发成本不断升高。因此，如何实现权限管理与具体信息系统 的业务应用分离，是信息系统开发亟待解决的问题。 本文以 RBAC 权限模型为基础，以 MSMQ 消息中间件为信息传递介质，以 COM 为实现载体，构造了一个不依赖于具体业务的独立权限管理控制构件。该构件主要包括 三部分：COM 方式的应用集成构件，权限服务器配置模块，MSMQ 应用服务器配置。 其中，应用集成构件嵌入宿主系统完成宿主系统与权限子系统的数据交换，服务器配置 模块负责接收权限管理员的权限设定并推送到 MSMQ 消息服务器，MSMQ 应用服务器 配置作为服务器配置模块与应用集成构件的联系纽带，存储加密的权限数据并推送到具 体宿主系统的相应集成构件中。该构件可方便地集成于信息系统中，避免了重复构建， 降低了总体开发成本，提高了权限管理的安全性、健壮性和有效性。 本文通过一个示例系统，展示了该构件的易用性和可重用性，表现了权限分配的直 观性、可扩展性、以角色为本、权限多变的特点。所设计的脱耦权限构件设计模式为信 息系统开发提供一种权限管理子系统开发思路。 关键词 权限管理 脱耦 RBAC MSMQ COM 组件 II II Abstract Abstract The traditional rights management subsystem has poor reusability and robustness. It should be repeated in different information systems and then lead the research and development costs rising. Therefore, how to separate the rights management from the business applications of the specific information system is an urgent problem to be solved in information system development. Based on the RBAC permission model, with MSMQ message middleware for information transfer media and COM for realization carrier, an independent rights management component was constructed. It mainly contains three parts, the application integration component, the authority server configuration module and the MSMQ application server configuration. The application integration component is embedded into the host system for data exchange with permission subsystem. The server configuration module is responsible for receiving permissions of the administrators and is pushed to the MSMQ server. The MSMQ application server is a bridge which connects the server configuration module and the application integration component. It stores the encrypted permission data and pushes them to the appropriate integration component of the specific host system. The proposed component can be easily integrated into an information system and can avoid repeated construction. It can reduce the development costs and promote the security, robustness and eff