面向组织结构的访问控制模型  

Organization-Structure Oriented Access Control Model

作　　者：赵小龙[1] 张毓森[1] 袁峰[2] 

机构地区：[1]解放军理工大学指挥自动化学院,南京210007 [2]国家信息安全工程技术研究中心,北京100093

出　　处：《计算机工程》2009年第10期155-157,161,共4页Computer Engineering

摘　　要：引入组织域的概念,描述企业组织的层状结构,在此基础上重新定义访问控制要素,提出面向组织结构的访问控制(OSOAC)模型,并扩展得到等级OSOAC模型和约束OSOAC模型。与RBAC模型相比,OSOAC模型能减少角色数量和权限分配关系,降低大型访问控制系统的管理复杂度。The concept of organization domain is introduced to describe the hierarchical structure of the enterprise organization. Based on the concept, the elements of access control are redefined and an Organization-Structure Oriented Access Control（OSOAC） model is proposed, The hierarchical OSOAC model and constrained OSOAC model are drawn by extended the Core OSOAC model. Contrast to RBAC model, there are fewer roles and permission assignment relations in OSOAC model, which reduce the privilege-management complexity in a large access control system.

关 键 词：访问控制 组织域 角色 等级 约束 

分 类 号：N945.12[自然科学总论—系统科学]