面向多策略服务的一种基于属性角色访问控制模型  

A MULTI-POLICY SERVICES-ORIENTED ATTRIBUTE-BASED ROLE-BASED ACCESS CONTROL MODEL

作　　者：朱一群[1] 李建华[1] 张全海[1] 

机构地区：[1]上海交通大学电子工程系,上海200030

出　　处：《计算机应用与软件》2008年第11期143-145,共3页Computer Applications and Software

摘　　要：针对面向服务环境中用户数量大量增长和资源访问策略日益复杂多样化的需求,分析国内外相关研究的发展和局限性,提出了面向多策略服务的一种基于属性角色访问控制模型。该模型根据多策略中用户属性和资源属性的关系,定义多组用户角色,制定相应规则,分配用户角色,满足访问策略多样化的需求,增强了系统管理灵活性,提高系统效率。给出了模型实例分析,并对国内外相关模型进行了比较。In accordance with the increasing customers and the various resource access policies in service-oriented environments, the limitation of the related research is anallyzed, and a multi-policy services-oriented attribute-based role-based access control（AB-RBAC） model is proposed. Based on the relationship between the resource attribute and the user attribute in muhi-policies, different role groups are defined, and relevant rules are made. User-rde assignment is realized based on a finite set of rules, and the requirement of multiple access policies is satisfied. The flexibility of access control is enhanced,and the efficiency of the system is improved. A case that uses the AB-RBAC model is described, and a detailed comparison among several models is made, which clearly shows the advantages of AB-RBAC.

关 键 词：属性 规则 用户角色分配 角色访问控制 访问策略 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论] P57[自动化与计算机技术—计算机科学与技术]