Enforcing Role-Based Access Controls in Software Systems with an Agent Based Service Oriented Approach

摘要

Access Control is often used to make restrictions to the resources in a system so that these resources can only be accessed by those who have the corresponding privilege. Role-Based Access Controls (RBAC) model introduces roles into Access Control so that the privilege is assigned to role and Access Control can be managed easily by defining the role of the users and inheritance structure of the roles. Although the RBAC model has been well accepted, it turns out to have some problems in applying RBAC to an existing system: an existing system is generally not organised in roles; it is very hard to add the Access Control functions to each module of an existing system. In this paper, an agent-based service oriented approach that helps existing systems be migrated to RBAC for software evolution is proposed. The architecture and working flow of the approach are presented and an example showing how to use the proposed framework and methodology is illustrated.