一种改进的基于角色的分级授权访问控制模型  

An Improved Role-Based Hierarchical Authorization and Access Control Model

作　　者：康丽珠[1] 黄青松[1] 刘利军[1] 

机构地区：[1]昆明理工大学信息工程与自动化学院,云南昆明650051

出　　处：《昆明理工大学学报（理工版）》2009年第1期39-42,共4页Journal of Kunming University of Science and Technology(Natural Science Edition)

基　　金：云南省条件平台项目(项目编号:2006PT06)

摘　　要：大多数企业的业务处理在功能访问权限和数据访问权限上有较高要求,而基于角色的访问控制模型的数据访问控制能力是有限的.因此,文中提出了一种改进的基于角色的分级授权访问控制模型,该模型将用户、功能权限和访问数据进行分级,自上而下形成树状结构,并形成了用户级别-功能-数据级别之间的映射关系,实现了逐级授权.该模型已成功运用于云南省大型科学仪器协作共用网络服务平台上,实现了较高的数据访问控制能力.In most organizations, modules access permissions and data access permissions in business processes have become more challenging. However, data access control in the role -based access control model has limited capabilities. Therefore, this article proposes an improved role -based hierarchical authorization and access control model, which classifies users, modules permissions, as well as accessed data into a top - down tree structure and creates user - level - modules - data - level mapping to implement hierarchical authorization. The model has been successfully applied to the Scientific Instruments Sharing Service Platform of Yunnan and greater data access control capabilities are achieved.

关 键 词：分级授权 访问控制 功能权限 访问权限 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]