Access Control in Network Management System

摘要

To conquer the problems existing in access control mechanisms available nowadays, such as how to manage the access authorities of the users and the protected resources, and how to keep the confidential data from visiting and modifying illegally, a new access control mechanism called Multi-Device TBPM-RBAC (MD-TBPM-RBAC) is proposed in this paper. According to the demand for unified users management in the network management system (NMS), MD-TBPM-RBAC uses Role-Based Access Control (RBAC) for the center, and expands the TBPM-RBAC. In MD-RBPM-RBAC, the users, resources and permissions are stored in the remote server, when a user lands, the device will communicate with the server to authenticate and authorize. As the MD-TBPM-RBAC implements the users' unified authentication and authorization, it manages the users centralized, protects the resources effectively, prevents the important resources from visiting illegally, and protects the critical processes from stopping illegally.