Flexible access control policy and its application research
一种灵活的访问控制策略及其应用研究*

This paper presented a flexible,object-oriented and declarative access control policy,its decision-making algorithm and enforcement framework.Compare to traditional access control policies,it consisted of five components-authorization type,subject,permission,constraint and effect,which made it flexible enough to express a variety of access control requirements.Presented decision-making algorithm and enforcement framework were adaptived to dynamic environment change,and could efficiently satisfy the requirement for distributed application.As an example of such application,also discussed its implementation and application in a distributed campus network system.