A New Role Hierarchy Model for Role Based Access Control  

一种新的基于角色访问控制的角色层次化关系模型(英文)

作　　者：吕宜洪[1] 宋瀚涛[1] 龚元明[1] 

机构地区：[1]北京理工大学计算机科学与工程系,北京100081

出　　处：《Journal of Beijing Institute of Technology》2002年第4期409-413,共5页北京理工大学学报（英文版）

基　　金：theSpecialFundonCapitalInformationDevelopmentofBeijingBureauofTechnologySupervision( 1999)

摘　　要：A new role hierarchy model for RBAC (role-based access control) is presented and its features are illustrated through examples. Some new concepts such as private permission, public permission and special permission are introduced, based on the RRA97 model. Some new role-role inheriting forms such as normal inheritance, private inheritance, public inheritance and special-without inheritance are defined. Based on the ideas mentioned, the new role hierarchy model is formulated. It is easier and more comprehensible to describe role-role relationships through the new model than through the traditional ones. The new model is closer to the real world and its mechanism is more powerful. Particularly it is more suitable when used in large-scale role hierarchies.提出一种新的基于角色访问控制理论的角色层次化关系模型 ,并通过实例说明模型的特点 .基于RRA97模型 ,提出私有权限、公有权限和特征权限等概念 ,提出一般继承、私有化继承、公有化继承和无特征继承等角色继承方式 ,并基于这些新思想建立角色层次化关系模型 .新模型在描述同样的角色层次关系时比传统模型更加简化和直观 ,更易于理解并与现实世界相贴近 ,特别适合于复杂角色层次关系的大型应用 .

关 键 词：RBAC access control ROLE INHERIT role hierarchy 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]