扩展的基于角色访问控制模型的设计  

Design of Extended Role-Based Access Control Model

作　　者：刘婷婷[1] 张友良[1] 

机构地区：[1]南京理工大学CIMS研究所,南京210094

出　　处：《计算机辅助设计与图形学学报》2004年第6期838-844,共7页Journal of Computer-Aided Design & Computer Graphics

基　　金：国防科技重点实验室基金和总装备部"十五"预研项目资助

摘　　要：协作系统的动态特性要求特定访问主体能够在安全监控下自主地进行访问主体角色关系配置 在研究开发的扩展的基于角色访问控制模型的基础上 ,应用对象建模方法对模型应用的关键问题提出了解决方案 ,包括一致性问题、动态监控、约束处理、安全控制等 该研究为扩展的角色的访问控制模型的实际应用提供指导 ,它可以应用到大型复杂系统 ,特别适用于动态协作系统 ,结合认证技术 。Collaborative work system requires specific users being able to assign some other system users to specific roles under the control of system. We developed an authorization supported role-based access control model named ASRBAC to satisfy this requirement. In order to realize this model in real world, this paper discusses some important problems which are critical to model the realization using object-oriented methodology, including consistency problem, dynamic monitor, constraint management and security control. This model can be applied in large-scale systems, especially large collaborative work system. Integrated with authentication technology, it can protect information security in large systems.

关 键 词：UML 对象 基于角色访问控制 授权 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]