基于RBAC模型的安全访问机制建模研究  

MODELING RESEARCH OF SECURITY ACCESS MECHANISM BASED ON RBAC MODEL

作　　者：丁胜[1] 陈建勋[1] 

机构地区：[1]武汉科技大学计算机科学与技术学院,湖北武汉430081

出　　处：《计算机应用与软件》2005年第11期115-117,共3页Computer Applications and Software

摘　　要：基于角色访问控制(RBAC)是一种方便、安全、高效的访问控制机制。介绍了软件系统安全控制策略,分析了RBAC的基本思想和用户角色分配的基本方法,提出了基于面向对象的RBAC建模思想,并用标准建模语言UML的交互图描述RBAC的授权流程,从而使系统开发人员有效理解RBAC模型并建立基于角色的系统。文中还给出了在数据备份系统中运用RBAC实现用户权限管理应用模型的实例。Role-Based Access Control（RBAC） is a kind of access control mechanism which is convenient, secure and high performance. This paper introduces the security control policy of software system, analyses the fundamental principle of RBAC, and the fundamental methods of allotting the user roles. The paper proposes a RBAC modeling idea based object oriented, describes the authorization process with interactive diagram of the well-known modeling language UML. In this way,it makes system developers understand RBAC model and build system based role. At last the article gives one example on application model which implements user authorization management based RBAC in data backup system.

关 键 词：RBAC模型 安全访问机制 角色访问控制 角色分配 建模语言 UML 授权流程 数据备份系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]