The research and scheme of RBAC using J2EE security mechanisms
Fangzhou Zhang, Xiaoyu Sheng, Yingying Niu, Fengpin Wang, Han Zhang · Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE · 2006
Access control based on RBAC makes the system suitable to the security strategy for special application, relieves burden of system administrators and can adapt itself to the adjustment of the system structure flexibly. But all the existing security mechanisms of the middleware technology can't support the RBAC model very well. The method using J2EE security mechanisms to support RBAC is showed in this paper. First, the configuration of J2EE security systems is given in the paper and the algorithm of J2EE authorization decision is designed. Then, the language of J2EE security description is used to define RBAC, and realization of the requirement of J2EE security service is given. It has achieved the anticipative effect in virtue of deployment and application on the platform of the national science technology infrastructure.