Fine-grained Service Side Access Control Model for Web Application

In the paper of SCUTA, to the more and more complicated network environment and the w3c's Same-Origin Policy's vulnerability, the author designs a new web access control model. It eases the difficulty of web policy's configuration and reduces the potential vulnerabilities. However, because of the inflexible model configuration design, it has low system flexibility. What's more, it also has many vulnerability. On the basis of it, we design a new model in detail, which was implemented and checked with Apache, PHP and Mysql. Relative to SCUTA model, this access control model can make the developer implements policy configuration easier, more efficient and more flexible avoiding the original vulnerabilities, which provides that this model can be more secure, more effective and faster.