Design and Implementation of Access Control and Delegation Model in Road Transport Management System

摘要

Software security is known to be a primary bottleneck in web-based software system. This paper describes how the Role-Based Access Control (RBAC) model can be applied to a road transport management system and demonstrates the design and implementation of the RBAC model in detail. In addition, a time limit and trust degree decreasing delegate authorization model is also proposed in order to give support to task allocation in the domain of time and to enhance the efficiency of cooperation between different departments and extraction of data. This design enables the system to be secure, reliable and convenient in daily use and it has been running stably and effectively for some time. It shows that the above design ensure security of the system and flexibility of authority management and meet current security standards in open environment.