HARBAC:基于分级管理思想的RBAC层级管理模型  

HARBAC Model for the Administration of Role-based Access Control

作　　者：李金双[1] 常桂然[1] 

机构地区：[1]东北大学计算中心,辽宁沈阳110004

出　　处：《小型微型计算机系统》2009年第7期1321-1325,共5页Journal of Chinese Computer Systems

基　　金：国家高校博士点基金项目(20030145017)资助

摘　　要：ARBAC97模型、ARBAC02模型和Crampton-Loizou模型是重要的RBAC管理模型,然而,这三个模型存在着一些必须被改进的问题.作者提出管理权域的概念,基于它提出RBAC层次管理模型(HARBAC,the hierarchical administration model for RBAC),并将HARBAC模型与前面三个模型进行对比,新模型具有显著的管理优势.The ARBAC97, ARBAC02 and Crampton-Loizou models make an important contribution to the understanding and modeling of administration of role-based access control. However, there are several features of the three models which we believe could be improved. In this paper, the concept of administrative domain is introduced and is used to manage RBAC model. A hierarchical administration model is proposed for role-based access control （HARBAC） and is compared with the above three models. Based on the comparison, the proposed model has some significant advantages over those three models.

关 键 词：RBAC 管理权域 角色层级 信息安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]