基于角色和上下文访问控制模型的建立  

Research on Role and Context-based Access Control Model

作　　者：徐燕[1] 彭军[2] 邵闻珠[2] 王新亮[1] 段英[2] 

机构地区：[1]石河子大学信息科学与技术学院,新疆石河子832003 [2]石河子大学计算机网络中心,新疆石河子832003

出　　处：《石河子大学学报（自然科学版）》2008年第3期391-394,共4页Journal of Shihezi University(Natural Science)

摘　　要：为增强基于角色的存取控制(RBAC)模型的灵活性和动态性,通过将上下文整合到RBAC模型中,提出了基于角色和上下文的访问控制(RCBAC)模型,并给出了它的实施框架。RCBAC模型中,上下文信息动态地控制着用户分配和权限分配,授权决策不仅依赖角色于而且依赖于运行时的各种上下文信息,这使得RCBAC能够灵活、精确地实施各种复杂的访问控制策略。Although the present RBAC model has many advantages, it also has some limitations, namely it lacks enough flexibility and dynamic authorization abilities. By integrating context into RBAC model, the paper presents Role and Context-Based Access Control（RCBAC）model, and gives its implement framework. In RCBAC model, context information dynamically controls user assignment and permission assignment, and authorization decision depends on not only role but also nmtime context information, which enables RCBAC model to implement flexibly and precisely all kinds of access control ways.

关 键 词：角色 上下文 访问控制 条件化的用户分配 条件化的权限分配 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]