基于角色的访问控制扩展模型及其实现  

Design of extended role-based access control model and its implementation

作　　者：樊金生[1] 关保灿[1] 李晓东[2] 

机构地区：[1]石家庄铁道学院计算机与信息工程分院,河北石家庄050043 [2]清华大学计算机科学与技术系网络所,北京100084

出　　处：《计算机工程与设计》2008年第18期4718-4721,共4页Computer Engineering and Design

基　　金：国家自然科学基金项目(60563002)

摘　　要：提出了一种改进的RBAC模型,该模型通过引入安全员、审计员、主客体安全等级、角色容量等概念,对传统RBAC模型进行了扩展,克服了传统RBAC中判断程序的权限仅仅根据启动程序的角色的不足,提高了模型的安全性。最后通过一个应用实例验证了新模型的有效性。An improved RBAC （role-based access control） model is represented. To get over the shortcoming of traditional RBAC model, which the authority of judge program is only based on the role of startup program, the improved model imports some concepts, such as guarder, auditor, the security level of main and subsidiary body, capability of roles and so on, then the security of traditional RBAC model is strengthened. Lastly, the validity of improved model is proved by an application instance.

关 键 词：基于角色权限控制 模型 安全性 权限 控制 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]