云计算环境中数据级权限管理研究

针对云计算环境中传统RBAC访问控制模型不能很好应对与业务逻辑高度关联的数据级权限管理的问题,结合规则引擎中规则可配置的特点提出了一种基于规则引擎的数据级权限管理模型.该模型以系统中的所有对象为事实库,使用逆向推理对数据级的权限进行判断.目前该模型已经被用于高校教学资源共享系统,实践结果表明该模型提高了系统对业务逻辑变更的应对能力,在保证云端数据安全的同时又具有一定的灵活性.

Research of Data-Level Privilege Management in Cloud Computing

In order to solve the problem that RBAC model cannot deal well with data-level access control associated wi business logic at height level, by the characteristics of rules configurable, we propose a rule-base engine to manage the data-level access control. In this model, all objects in system are regarded as fact base, and back reasoning is used to make judgments with data-level access control. This model is used in teaching resource sharing system, and the practical result indicates that it enhances the system＇ s ability to cope with business logic change. In addition, this model in clouding can both ensure data security and has some flexibility.