细粒度角色访问控制模型及其应用  

The study and application of fine granularity RBAC model

作　　者：廖尔崇[1] 

机构地区：[1]华北电力大学计算机科学与技术学院,河北保定071003

出　　处：《河北省科学院学报》2009年第3期55-58,共4页Journal of The Hebei Academy of Sciences

摘　　要：针对传统的角色访问控制模型权限控制粒度较大、权限控制代码横切业务功能模块、难以有效支持软件复用等问题,提出了一种细粒度角色访问控制模型。该模型通过引入外权限和内权限细化了权限控制粒度,并通过AOP技术实现了内权限的动态配置,提高了组件复用度和模块独立性。该模型已在实际项目中得到应用,验证了模型的正确性和有效性。The traditional RBAC model has two disadvantages. First, the granularity of permission is larger. Second, the module of permission control crosscuts business function modules can not support software reuse effectively. To resolve these problems, fine granularity RBAC model is put forward. It reduces the granularity of permission by outer-permission and inner-permission introducing. The model can realize dynamic configuration of inner-permission and improve component reusability and module independence by AOP technology. The model has been applied to a software project. The results show the model is correct and effective.

关 键 词：细粒度 RBAC AOP 内权限 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论]