B/S系统中跨权访问控制技术

摘要

Through analyzing the compulsion access in HTTP request and information juggle and forgery, design data access control model and task purview model, and realize access filtering of task data and URL verifying request. The technology can solve the access control problem in B/S system and realize multi-dimension data logic in encrypt system.%通过分析HTTP请求中的强制访问和信息篡改及伪造问题,设计业务数据访问控制模型和业务活动权限模型,实现了业务数据的访问过滤和业务活动URL请求校验.该技术有效地解决了B/S系统中的跨权访问问题,实现涉密系统中多维数据的访问控制逻辑.