医疗系统中基于RBAC的权限管理的实现  

Implementation of Privilege Management in Medical System Based on RBAC

作　　者：夏克俭[1] 刘芸虬[1] 

机构地区：[1]北京科技大学,北京100083

出　　处：《办公自动化（综合月刊）》2008年第12期42-44,共3页Office Informatization

摘　　要：系统内部软件员工多为企业内部员工及部分指定用户,因此必须有一套明确的用户管理及权限分配机制,以杜绝非法用户的访问,并防止系统正常用户发生越权操作。以医疗应用软件为例,阐述了RBAC模型的实现,模型根据用户职位确定用户角色,以角色划分用户权限,并最终应用于实际的医疗系统中。医疗系统中加入基于RBAC权限管理后,保障了数据的安全性及有效性,在实际应用中已经被证明是相当有效的。Most users of Medical System are staffs in the Medical Corporation. There must be a definite privilege management in the Medical System to avoid the illegal user＇s accessing, and prevent the authorized users from across-role operations. This paper introduces the implementation of RBAC Model in the medical System. Roles are determined by positions which determine the privileges. After the RBAC model is successfully added to the Medical System, the safety of database and the Medical System is ensured, and it＇s proved that the application of RBAC model is successful and effective.

关 键 词：RBAC 医疗权限系统 角色 权限 安全性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]