扩展的角色访问控制模型及其应用  

Extended RBAC model and application

作　　者：廖尔崇[1] 徐晓飞[1] 刘旭东[1] 战德臣[1] 

机构地区：[1]哈尔滨工业大学计算机科学与技术学院,黑龙江哈尔滨150001

出　　处：《计算机工程与设计》2008年第7期1608-1611,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2006AA04Z165;2006AA04Z150;2006AA01Z167)

摘　　要：针对传统的角色访问控制模型权限控制粒度粗、不能很好地支持软件复用等问题,提出了一种扩展的角色访问控制模型。该模型细化了权限控制粒度,并通过元数据对模型权限控制进行描述,进而实现了权限的动态配置,提高了软件的复用度。该模型已在实际项目中得到应用,实例验证了模型的正确性和有效性。The traditional RBAC model has two disadvantages, the permission-control is a little coarse and is not enough convenient for further software reuse. To resolve these problems, an extended RBAC model is put forward. The ranks of permission is refmed and the process of permission-control with meta-data is described. The model can implement dynamic configuration of permission, and improve soflwarereusability. The model has been applied to a software project in an enterprise, which proves that it is one correct and effective model.

关 键 词：基于角色的访问控制模型 软件复用 元数据 单元级权限 构件视图 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论]