面向用户角色的细粒度自主访问控制机制  

Fine-granularity discretionary access control based on user's role

作　　者：魏立峰[1] 孟凯凯[1] 何连跃[1] 

机构地区：[1]国防科学技术大学计算机学院,长沙410073

出　　处：《计算机应用》2009年第10期2809-2811,共3页journal of Computer Applications

摘　　要：基于访问控制表(ACL)的细粒度自主访问控制机制可以实现针对单个用户或用户组的访问授权,但是在实际使用中可能造成不适当授权或权限撤销不及时的缺陷。基于可信Kylin操作系统的角色定权(RBA)机制,在自主授权中引入了用户角色约束,提出了一种面向用户角色的细粒度自主访问控制机制,实现了针对单个用户在承担特定角色时的访问授权,一旦用户不再承担该角色,访问授权可以及时撤销,有效解决了ACL不适当授权的问题。Fine-granularity discretionary access control based on Access Control List （ACL） may grant authority to one user or group, but it may grant unapt authority or remove authority not timely. Based on Role-Based Authorization （RBA） of trusted Kylin OS, introducing user＇ s role restriction in discretionary access control, a fine-granularity discretionary access control mechanism to user＇ s role was given. It can which may grant authority to the user with special role, and remove authority from the user without special role, therefore solves the problem of granting unapt authority.

关 键 词：自主访问控制 访问控制表 角色 授权 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]