外文翻譯--web環(huán)境下基于角色的訪問控制-wenkub
2023-06-14 08:39:07 本頁面
【正文】 Many panies have demonstrated that a well designed Web site can have a positive effect on their profitability. Enabling customers to answer their own questions by clicking their way through Web pages, instead of dealing with operators and voice response systems, increases the efficiency of the customer interface. One of the most challenging problems in managing large worked systems is the plexity of security administration. This is particularly true for anizations that are attempting to manage security in distributed multimedia environments such as those using World Wide Web services. Today, security administration is costly and prone to error because administrators usually specify access control lists for each user on the system individually. Rolebased access control (RBAC) is a technology that is attracting increasing attention, particularly for mercial applications, because of its potential for reducing the plexity and cost of security administration in large worked applications. The concept and design of RBAC is perfectly suited for use on both intras and inters. It provides a secure and effective way to manage access to an anization’s Web information. This paper describes a research effort to develop RBAC on the Web. The security and software ponents that provide RBAC for worked servers using Web protocols have been implemented and are described in this paper. The RBAC ponents can be linked with mercially available web servers, and require no modification of the server software. Introduction Establishing and maintaining a presence on the World Wide Web (Web), once a sideline for . industry, has bee a key strategic aspect of marketing and sales. Many panies have demonstrated that a welldesigned Web site can have a positive effect on their profitability. Enabling customers to answer their own questions by clicking their way through Web pages, instead of dealing with operators and voice response systems, increases the efficiency of the customer interface. Companies are seizing the Web as a swift way to streamline even transform their anizations. More recently panies have begun using web technology to service the public as well as private and internal clients. Web sites are set up to segregate some information from the general public, providing it to only selected or private clients. Typically, public inter is cordoned off from the general public by having user accounts and passwords. Additionally, Web sites are now running inside the pany often created for and by employees. These internal private s or intras use the infrastructure and standards of the Inter and the World Wide Web but are cordoned off from the public Inter through firewalls. The Web can be used as an inexpensive yet powerful alternative to other forms of munications. A plethora of corporate information (., procedures, training materials, directories, forms) can be converted to electronic form and made available via the Web. With a single source for these materials the cost of maintenance is significantly reduced, while greatly simplifying the task of ensuring currency. Thus an objective of enterprise puting, creation of a pany wide system irrespective of the underlying information technology infrastructure can be fulfilled. Although the inter and intras can offer great benefits to a pany or government agency, security threats remain. To date enthusiasts tend to focus on how to link people and businesses, not on using the work as a way to run and manage businesses securely. Although existing Web servers can effectively provide all or nothing access to a particular Web site and a number of popular Web servers can even provide fairly fine grained access control, they provide very primitive tools to administer these controls from the perspective of a single enterprise. This paper describes the benefits of RBAC and an implementation of RBAC on the Web (RBAC/Web), and in particular as RBAC applies to an intra puting environment. This will provide We
畢業(yè)設(shè)計相關(guān)推薦
鄂ICP備17016276號-1