一种基于扩展角色的访问控制模型和方法  

An Extended Role-Based Access Control Model and Method

作　　者：刘伟[1] 刘嘉勇[1] 

机构地区：[1]四川大学信息安全研究所,四川成都610064

出　　处：《信息与电子工程》2009年第1期76-79,共4页information and electronic engineering

摘　　要：针对传统的基于角色访问控制(RBAC)模型的不足,在基于角色的权限访问控制的基础上,提出了一个扩展角色访问控制模型,新模型对角色和权限的概念进行了扩展,使得RBAC模型能够更灵活、高效地对系统进行权限访问控制,增强了访问控制安全。As a way to defend information＇s confidentiality and integrity, access control takes a quite important role in military system and commercial system. Role-Based Access Control（RBAC） Model has been generally used in morden sofeware systems, and it has become one of the hotspots in the field of information. On the basis of RBAC, an Extended Role-Based Access Control（ERBAC） model is introduced against the imperfections of the famous RBAC model. Then the applying process of this model is illuminated. In the improved model, the concepts of role and permission are extended, which makes RBAC model be applied to systems freely and efficiently, and strengthens the security of access control.

关 键 词：信息安全 基于角色的访问控制 扩展角色 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]