視覺化權限管理模型實作之研究

The Study of Building a Visual Access Control Model

10.6382/JIM.200201.0091

陳儷穎(Li-Ying Chen)；謝文恭(Wen-Gong Shieh)

存取控制 ； 使用者介面 ； 資源管理 ； Access Control ； User Interface ； Resource Management

資訊管理學報

8卷2期（2002 / 01 / 01）

91 - 106

繁體中文

本研究以partial order表示資訊資源與存取權限，並繪製存取控制權限關係圖，以幫助資訊管理人員有效控管資訊資源存取。良好的圖形介面，是簡化資訊安全控管的利器。目前各種應用系統提供的存取控制功能，尚無完整友善的圖形介面，本研究將針對此一缺失，提出更友善的另類圖形介面，並以實作之方式展現，使資源存取控制的管理簡化。

We present information resources and their access control in partial orders and diagrams for easy and effective access control. A good graphic interface is a powerful tool for simplifying information management. However, in current application systems, integrated and user-friendly graphic interfaces are not provided for access control. Therefore, for the lack of such interfaces, we create a visual access control model. We also demonstrate our idea of simplifying access control management through a simple prototype.

1. Graham, G. S.,Denning, P. J.(1972).Proceedings AFIPS Spring Joint Computer Conference 1972.
2. Hirugachi, T.(1951).On the dimension of partially ordered sets.Science Reports,1
3. Sandhu, R. S.(1993).Lattice-based Access Control Models.Computer,26(11)
4. Sandhu, R. S.(1988).The Ntree: A Two Dimension Partial Order for Protection Groups.ACM Transactions on Computer Systems,6(2)
5. Sandhu, R. S.,Coyne, E. J.(1996).Role-based Access Control Models.IEEE Computer,29(2)
6. Sandhu, R. S.,Samarati, P.(1994).Access Control: Principles and Practice.IEEE Communications Magazine,32(9)
7. Shieh, W. G.,Weems, B.,Kavi, K. M.(1990).Computer Security Applications Conference 1990.