基于角色和用户组的扩展访问控制模型  

Extended access control approach based on role and group

作　　者：邢汉发[1,2] 许礼林[2] 雷莹[2] 

机构地区：[1]中南大学测绘与国土信息工程系,长沙410083 [2]国家基础地理信息中心,北京100044

出　　处：《计算机应用研究》2009年第3期1098-1100,共3页Application Research of Computers

基　　金：国家科技支撑项目(2006BAJ09B0601)

摘　　要：针对传统的RBAC模型所存在的问题,引入用户组进行了改进:除了RBAC模型的角色授权外,增加了用户组对数据资源进行授权,使用户所拥有的权限变成用户所属角色的功能权限和用户所属部门的资源权限之和。改进后的混合授权的扩展模型(E-RBAC)不仅有效解决了角色定义、用户职责、功能和资源等动态变化对系统所带来的问题,更增强了对用户授权的灵活性和可维护性,并且在实际项目中得到了应用。During further anglicizing RBAC,this paper pointed out its shortcoming.This paper proposed an improved model named E-RBAC.One way to grant user privilege was using role based on RBAC,another way was using user group that introduced above.The improved mix granting method solved the mentioned problem and was very convenient,as well as made the system s authority limitation management easier.Meanwhile,it improved the safety of system.It had been used in some projects successfully.

关 键 词：访问控制模型 角色 用户组 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]