角色访问控制模型在两票管理系统中的应用  

APPLICATION OF A ROLE-BASED ACCESS CONTROL MODEL IN THE MANAGEMENT OF THE MAINTENANCE AND SWITCHING SCHEDULING SYSTEM

作　　者：孟建良[1] 亢建波[1] 庞春江[1] 刘伟达[1] 鲍琳丽 

机构地区：[1]华北电力大学计算机学院,河北省保定市071003 [2]洛阳市供电公司,河南省洛阳市471700

出　　处：《电力系统自动化》2004年第23期81-84,共4页Automation of Electric Power Systems

摘　　要：在电力调度检修票和操作票(简称两票)系统中,设计了许多功能和流程,一个用户具有多个权限,一个权限也需要授予多个用户。文中在电力调度两票管理系统中引入基于角色的访问控制(RBAC)模型,其基本特征是根据安全策略划分出不同的角色,对于每个角色分配不同的权限,并为用户指派不同的角色,用户通过角色间接地对信息资源进行许可的相应操作,使得对用户的管理更直观,在很大程度上简化了权限管理工作。In the maintenance and switching scheduling system (viz. the two-order system) for electric power dispatching, a lot of functions and flows have been designed and a user has many permissions while a permission can be granted to many users, which causes the system management overburden. The role-based access control (RBAC) model suitable for the two-order system is adopted in this paper. Its essential characteristic is that roles are defined and classified according to the safety strategy and then users are assigned different roles according to their positions in a power company, so the users can indirectly perform their corresponding operations permitted via the roles. By applying the above model, the relations among the roles become relatively stable and are easily maintained because the users rather than the roles are frequently changed in the two-order system. This makes it more intuitive to manage the users while simplifying the authorization management to a great extent.

关 键 词：基于角色的访问控制 基于角色的授权控制模型 权限继承 应用模型 调度检修票 调度操作票 

分 类 号：TM769[电气工程—电力系统及自动化]