基于同构化客体状态适配监控的RBAC扩展模型研究  

Research on an Expanded Model of RBAC Based on Isomorphic Adapter-monitor of Objects'States

作　　者：周启海[1] 陈森玲[2] 靳健 黄涛[1] 李忠俊[1] 林珣[1] 

机构地区：[1]西南财经大学信息技术应用研究所,成都610074 [2]西南财经大学经济信息工程学院,成都610074 [3]广州铁路集团公司广州机务段,广州510010

出　　处：《计算机科学》2008年第5期213-215,219,共4页Computer Science

摘　　要：为了改进和提高角色访问控制(RBAC)的角色管理与权限配置效能,本文提出了一种基于同构化客体状态适配监控的RBAC扩展模型。该模型在RBAC的角色与权限之间新增设一个基于客体状态的同构化适配监控层,使不同客体状态所对应的角色及其权限建立起关联;并在客体状态发生转换而引起其相关角色和权限变更时,可通过观察者模式正确地及时捕捉、自动回应和动态适配这些转换和变更,以尽可能地避免访问冲突、阻绝非法访问;从而,能对各客体在不同状态下的安全访问与访问安全,实施更有序和高效的敏捷控制。In order to improve and enhance the efficiency of role-managing and permission-assigning of traditional RBAC, an expanded model of RBAC based on isomorphic adapter-monitor of objects＇states is proposed, which associates roles and corresponding permission while objects are in different states. When the states switch and accordingly alter the assignment of roles and permission, with Observer Pattern, the adapter-monitor can catch it in time, response it automatically and then adapt it dynamically, to avoid accessing conflict and prevent illegal access as possible, thus more efficient and agiler to control the access safety and its implement in different objects＇ states.

关 键 词：同构化 角色访问控制(RBAC) 客体状态 适配监控 转换变更 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]