RBAC96权限生成改进模型  

Improved Model of RBAC96 for Permission Building

作　　者：段辉映[1] 杨丹[1] 吴映波[1] 

机构地区：[1]重庆市重庆大学,重庆硕士研究生400044

出　　处：《微计算机信息》2007年第05X期181-182,共2页Control & Automation

摘　　要：权限是操作集合和对象片断集合的对应。对象片断集合是同类对象通过分组和分片两个操作得到的。这样的认识使系统的权限控制粒度更加灵活,权限的规模可以很大程度的缩小。本文首先简要介绍了RBAC96模型,然后深入介绍了分组和分片的概念,提出了包含权限生成子模型(permission build)的RBAC96改进模型,并给出了形式化描述。最后,给出其在实际项目中的应用。　Permission is used to designate a correspondence between operation set and segment of object set. Segment of object set is the consequence of grouping and segmenting of the similar objects. The understanding of it makes the control of permission more efficiently , and the size of permission can be reduced sharply. This article simply introduces the model of RBAC96 at first. Then, thoroughly introduces the concept of gouping and segmenting . Giving an improved model of RBAC96, which contains a sub model called permission build, and describe it in formalization. At last, proves it with a practical project.

关 键 词：RBAC 权限生成 权限控制 对象分组和分片 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]