权限管理是现代信息系统设计的核心内容之一,降低权限管理实现与宿主系统的耦合、提高权限系统的复用能力,对信息系统降低研发成本、增强系统健壮性有着重要意义.本文从信息系统解耦相关概念出发,分析脱耦组件的需求模式,提出了一套基于消息服务及RBAC技术的脱耦权限组件设计结构并予以实现.该组件具有独立的权限管理设计模式,并借助消息服务达到了易部署的目的,一定程度上拓宽了权限管理的设计模式.
[1] 王建岭, 李仁玲, 王恒草, 王铁柱, WANG Jianling, LI Renling, WANG Hengcao, WANG Tiezhu. Web服务的多层入侵容忍机制 [J]. 河北大学学报（自然科学版） 2012.doi:10.3969/j.issn.1000-1565.2012.05.017
[2] RAN Jiang, WEN Zhigang, FAN Chunxiao. Privilege management for resources sharing web platform based on RBAC model [A]. 北京 2010.
[3] LI Jin. Design and implementation for universal privilege management infrastructure [J]. Applied Mechanics and Materials 2013, 241-244.
[4] {Missing}. Privilege Management Infrastructure for Virtual Organizations in Healthcare Grids [J]. IEEE transactions on information technology in biomedicine: A publication of the IEEE Engineering in Medicine and Biology Society 2011, 2(2).
[5] ROHRER F, ZHANG Y T, CHITKUSHEV L. DR BACA:Dynamic role based access control for android [A]. New Orleans 2013.
[6] LANG U, SCHREINER R. Implementing least privilege for interconnected, agile SOAs/clouds [A]. Wiesbaden:Vieweg+Teubner Verlag 2012.
[7] SOUTO E, GERMANO G, GLAUCO V. A message-oriented middleware for sensor networks [A]. New York 2004.
[8] Sandhu R.S., Coyne E.J.. Role-based access control models [J]. Computer 1996, 2(2).
