一种新的基于角色的访问控制模型  

A new model of role-based access control

作　　者：韩承双[1] 程再玲[2] 

机构地区：[1]安庆师范学院计算机与信息学院,安徽安庆246011 [2]安庆师范学院数学与计算科学学院,安徽安庆246011

出　　处：《合肥工业大学学报（自然科学版）》2008年第11期1782-1785,1804,共5页Journal of Hefei University of Technology：Natural Science

基　　金：国家科技创新基金资助项目(05C26222120349);安徽省教育厅自然科学基金资助项目(kj2007a124zc)

摘　　要：文章提出了一种新的基于RBAC的角色层次控制与用户业务限制混合权限管理模型(N-RBAC),定义了角色的共有权限、基于层次控制的角色影子权限以及用户的私有业务约束;该模型比传统的RBAC或其修正模型具有更高的灵活性和更广的适用性,解决了角色与用户之间共性与个性的矛盾,既简化了信息系统中对用户授权管理,又使相同角色的用户对相同的功能模块可以有不同的操作限制;详细讨论了N-RBAC的设计原理与实现方法;应用实践表明该模型使用方便,设置灵活,能有效满足各类信息系统权限管理的需要。A new authoritative management model, N-RBAC, which is based on the combination of role hierarchy control with the user transaction limit is presented. The public authority of the role, the shadow authority based on the role hierarchy control, and the user＇s private transaction restraint are defined. Compared with the traditional RBAC or its revised model, the N-RBAC is more flexible and efficient, the contradiction of generality and individuality between the role and the user is resolved. It not noly simplifies the user authorization management in the information system, but it also enables those users with the same role to have the different operating limitation to the same function module. The detailed discussions are given about the principle of design and the implementation method of the N-RBAC. It is proved in application practice that the proposed model is easy in operation and flexible in establishment.

关 键 词：信息系统 权限管理 角色 基于角色的访问控制 层次控制 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]