用角色模型实现传统访问控制  

Use Role Model to Realize Traditional Access Control

作　　者：田敬东[1] 何再朗[1] 张毓森[2] 

机构地区：[1]解放军理工大学通信工程学院,南京210042 [2]解放军理工大学解放军理工大学指挥自动化学院,南京210042

出　　处：《吉林大学学报（信息科学版）》2005年第3期299-305,共7页Journal of Jilin University（Information Science Edition）

基　　金：国家863计划基金资助项目(2002AA141090)

摘　　要：针对传统访问控制模型存在使用不方便等缺陷,采用RBAC(Role BasedAccessControl)模型对其进行了改造,在不改变其原有安全标记的基础上,用RBAC模型实现了传统的访问控制,并给出了理论证明。结果表明,该方法既保证了传统访问控制模型在信息流控制方面的优点,又具有RBAC模型容易管理和灵活配置的特点,用角色模型可以完全取代传统的访问控制模型,这是安全模型发展的必然趋势。Traditional access-control models is not convenient to use, we adopt role-based access-control model to rebuild them. Based on unchanging the security label of the traditional access-control systems, this thesis uses role-based access-control model realized traditional access-control models, and proves it in theory. As a result, this method ensures the merit of information flow control of traditional access-control models, and has the characteristics of easy to management and flexible to configure of role-based access-control model, and then we can use role-based model to replace traditional access-control models completely, this is the certain direction of security models will develop.

关 键 词：访问控制 基于角色的访问控制 基于格的访问控制 强制访问控制 自主访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]