基于职能域的角色访问控制模型的研究及应用  

RESEARCH AND APPLICATION OF FUNCTION FIELD-BASED RBAC MODEL

作　　者：赵菁华[1] 刘旭东[1] 冯惠[2] 周平[2] 

机构地区：[1]北京航空航天大学计算机学院,北京100083 [2]中国电子技术标准化研究所,北京100007

出　　处：《计算机应用与软件》2009年第4期133-136,共4页Computer Applications and Software

摘　　要：利用组织结构信息进行访问控制已越来越受到重视,特别是在电子政务领域中控制资源的访问要求定义支持职能域的访问控制形式模型。然而,传统的角色访问控制(RBAC)模型并不能满足这些涉及不同组织和虚拟环境的权限管理方面的需求。对现有的RBAC模型进行扩充,提出了基于职能域的角色访问控制模型(DRBAC),使其在定义安全策略时能够满足不同的信息系统所涉及的业务领域对权限管理的要求。随后,给出DRBAC模型的形式化描述,对比分析DRBAC模型所具有的特点和优势。最后,结合数据字典管理系统(DDMS)的开发,给出了DRBAC的一个应用实例。Growing attention has been paid to access control using information of organization structure, especially in E-government area, where the resource access control requires defining formal model of access control which holds out Function Field. However, traditional rolebased access control （RBAC） model can＇t satisfy the requirements that relate to different organizations and to authority management in virtual environment. In this article the existing RBAC model is extended as to proposing a function filed-based RBAC which is named DRBAC, the definition of DRBAC model in security policy enables it to satisfy the requirements of authority managements from business fields related to different information systems. The formal description on DRBAS is addressed afterwards, and the feature and advantages of this model are comparatively analyzed. In the end of the paper,in combination with the development of Data Dictionary Management System （DDMS） ,the detailed implementation instance of DRBAC is provided.

关 键 词：信息安全 RBAC 职能域 形式模型 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论] TP393.08[自动化与计算机技术—计算机科学与技术]