RBAC模型的角色层次关系及授权管理研究  

Research on the Role Hierarchy and Permission Management of the Role-Based Access Control Model

作　　者：蔡琼[1] 韩洪木[1] 左翠华[2] 

机构地区：[1]武汉工程大学计算机科学与技术学院,湖北武汉430073 [2]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机工程与科学》2007年第4期36-37,50,共3页Computer Engineering & Science

摘　　要：针对RBAC96模型簇中角色私有权限处理存在的不足,本文提出把角色权限分为私有权限和公有权限;并且,在角色权限继承时,保证了角色的私有权限不被高层次的角色继承,高级角色只能继承低级角色的公有权限部分。针对RBAC96簇模型的普通角色继承所存在权限不能及时授予与回收的问题,给出了一种面向任务的RBAC策略方案,从而使得RBAC模型更好地发挥其优势。Aiming at the shortcomings of role-permission inheritance privilege and extreme privilege in the relationship of role-permission assignment of the RBAC96 models, this paper suggests the role permissions he divided into private permissions and public ones;and in role-permission inheritance, the privatizing permission of a role will not he inherited by highlevel roles, which can only inherit its public permissions. Meanwhile, aiming at the problems in the RBAC96 models such as granting and reclaiming the authorities of roles, the conception of task is added to RBAC. Therefore, the RBAC model can exert its superiority better.

关 键 词：基于角色的访问控制 任务 私有权限 角色层次关系 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]