关键词: 访问控制策略描述, 访问控制, 上下文约束

Abstract: With concern of the current research results as well as the features of the demands for access control of the Web-based application system, the authors propose a context constraint access control theory model on the level of standard reference model, from the perspective of flexibility, generality, and feasibility, and elaborate on the theory of this model and the architecture of access control system. Then the authors give the description and modeling of the access control policy and defines the entities and relations in the model by using a XML-based policy specification grammar called X-Grammar. Finally the overall function description and structure design is given, and an engineering method to elicit and define context constraints is raised.

Key words: context constraint, access control policy specification, access control