TRBAC模型的研究及其在企业MIS中的应用  

Research of TRBAC model and its application in enterprise MIS

作　　者：侯思祖[1] 张敬敏[1] 陆旭 田新成[1] 

机构地区：[1]华北电力大学电气与电子工程学院,河北保定071003 [2]辽宁省盘锦市供电公司,辽宁盘锦124010

出　　处：《计算机工程与设计》2008年第12期3106-3108,共3页Computer Engineering and Design

摘　　要：访问控制是保证企业信息系统安全性的重要组成部分,但传统的模型都不能满足企业多变的控制需求,因此引出了基于任务-角色的访问控制模型(TRBAC)来满足企业的需求。该模型解决了基于角色的访问控制模型(RBAC)不够灵活的缺点,并通过时间约束、最小特权约束和职责分离约束增加了系统的安全性。最后结合实例,详细阐述了TRBAC模型在企业权限管理中的实现。Access control is an important part of the information system security in the enterprise environment, but the conventional models can＇t fully meet the changeful requirements of the enterprise environment, therefore task-role-based access control model （TRBAC） is introduced to satisfy the enterprise requirements. This model improved the flexibility of role-based access control model （RBAC）, and enhances the security of the system by time restriction, minimal privilege restriction and responsibility separation restriction. And then the realization of TRBAC model is elaborated in enterprise privilege management for example.

关 键 词：TRBAC 企业环境 工作流 授权约束 MIS 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]