OC-RBAC模型在管理信息系统中的应用  

Application of OC-RBAC model in MIS

作　　者：杜红燕[1] 潘怡[1] 黄彩霞[1] 欧新良[1] 

机构地区：[1]长沙学院计算机科学与技术系,湖南长沙410003

出　　处：《华中科技大学学报（自然科学版）》2009年第9期53-55,共3页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：湖南省自然科学基金资助项目(07JJ3121)

摘　　要：针对传统基于角色的访问控制(RBAC)的局限性,提出了一种基于客体类的RBAC(OC-RBAC)模型.该模型引入客体的访问权限控制,大幅度减少了角色权限指派的次数,使权限得到了简化和有效控制,提高了权限分配的灵活性,从而更加适于企业应用和管理.最后通过结合某信息管理系统开发实例,讨论了OC-RBAC在信息管理系统中的设计和应用.通过实验证明,OC-RBAC模型与传统RBAC相比有较高的效率和适应能力.The research background and the limitations of conventional role-based access control （RBAC） were discussed. An object class-based RBAC （OC-RBAC） model was proposed, in which the access objects was introduced into the permission model. A substantial reduction in the role assigned to the number of permissions, permission was simplifed, timely management, increased flexibility in the allocation of authority; streamline the management of the authority. The OC-RBAC model improves the flexibility of permission allocation, and makes the operation of administrators easy. The model was adopted in a management information system and the result shows that the OC-RBAC model overcomes the shortcomings of conventional RBAC.

关 键 词：安全系统 管理信息系统 客体 基于角色的访问控制 安全策略 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]