利用规则RBAC模型实现门户的安全访问控制  

Implementing ruled-role-based access control model in portal

作　　者：程玉松[1] 孟丽荣[1] 盛琦 刘学波[1] 柳楠[1] 

机构地区：[1]山东大学计算机科学与技术学院,山东济南250061 [2]山东移动通信规划设计研究院有限公司,山东济南250021

出　　处：《计算机工程与设计》2005年第5期1299-1301,共3页Computer Engineering and Design

摘　　要：基于角色的访问控制(Role-BasedAccessControl,RBAC)是一种安全、高效的访问控制机制,并不能满足门户中根据用户特征的动态改变而动态地改变用户角色的需要。结合RBAC模型思想和门户的需要提出一个基于规则的RBAC模型,在用户和角色之间增加规则,并通过定义规则表达式实现了动态的用户角色分配,克服了标准的基于角色访问控制模型应用于门户的缺陷。讨论了以规则RBAC模型为基础的门户中资源访问控制的实现,有效地解决了门户中的安全访问控制问题。Role-based access control (RBAC) is a kind of access control mechanism which is secure and high efficient. The RBAC model is not satisfid with requirement of portal, which can change user's roles with changing of user's property. The ruled-RBAC model is proposed combined with thinking of RBAC model and requirement of portal, which adds rule mechanism between users and roles. The mechanism realizes the role authorization dynamically by defining rule-formula and improves the performance of standand role-based access controlmodel in portal. The implementationof resource access control in portal on the basis of theruled-RBAC modelis discussed. And the question of secure access control in portal is resolved effectively.

关 键 词：门户 角色 访问控制 规则RBAC模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]