一种扩展的基于角色的XML访问控制模型  

An extended role-based access control model for XML

作　　者：周继波[1] 李沛武[2] 李钢[1] 林元国[1] 

机构地区：[1]南昌航空大学计算机学院,江西南昌330063 [2]南昌工程学院科研处,江西南昌330099

出　　处：《南昌工程学院学报》2008年第6期7-11,共5页Journal of Nanchang Institute of Technology

基　　金：江西省自然科学基金资助项目(0511062)

摘　　要：Zhang Xinwen等人提出了一种基于角色的XML访问控制模型(X-RBAC),在分析该模型不足的基础上,提出了一种扩展的基于角色XML访问控制模型(EX-RBAC),按照客体的属性对客体进行归类,将权限定义在某一类客体上,主体对具体客体的访问权限由给该主体指派的角色和相应的访问域来确定,极大地减少了角色和权限的数量.结合实例应用,介绍了该模型的实施方法.This paper analyzed the disadvantages of the role-based access control model for XML （X-RBAC）, which is proposed by Zhang Xinwen et al, and put forward an extended role-based access control model for XML （EX-RBAC）. In EX-RBAC, the objects are classified according to their attributes, and the subject＇s permissions are determined according to the roles the subject plays and corresponding access domain. The EXRBAC can reduce significantly the number of the roles and the permissions. Finally, the implementation method of EX-RBAC is presented in this paper with an example of application.

关 键 词：访问控制 XML 访问域 基于角色的访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]