The Research Of Role Based Access Control In Steel Company

With the increasingly development of the Internet era,network security is more important.Role-based access control mechanism makes the control permission more flexible and the authorization management easier and the management consumption is greatly reduced for it adds roles between in the permissions and users,which can effectively improve the security of enterprise information system.This paper aim at improving the information system security of the iron and steel enterprises and other large enterprises and study access control technology which is suitable for the information system of this type of enterprise.This article firstly analyze the existing role-based access control model(such as ARBAC97 model,the RBAC96 model and ARBAC02 model)and the shortage of these models in the applications of iron and steel enterprise information system.On this basis,this paper studies role-based access control model suitable for the iron and steel of enterprise information system according to the characteristics of the iron and steel enterprises.In this model: using dispersion and distribution mechanism of permissions and adding permissions and role function attributes,administrator allocate the different permissions to the subordinate administrators according to different functions and then subordinate administrators the allocate corresponding roles and permissions;based on general requirements of multi application and single authentication making identity authentication scheme which has no relation with application services;subdividing permissions into the operation and the objectand defining the permissions which do not need to be inherited as private permissions.The paper finally achieved the corresponding role access control system and used it in the iron and steel enterprise information system.As the experimental results,the users of the enterprise can safely access enterprise system by the achieved access control system,which greatly enhanced the security of information system in iron and steel enterprises.