Research on Distributed Access Control by Security E-government

Since the method of using username and password and the traditional access-control list mechanism can no more keep up with the further development of e-government, we realized a distributed-access-control model to settle this problem. This model divides the security management into two levels: First is global security management level which is responsible for harmonizing and controlling the security management of all the control objects of the e-government network; Second is local security management level which is in charge of the security management of local departments or objects inside local project group. By recompiling of the kernel of FreeBSD 5.0 version RC2, we have realized the access control model described above.