一种面向对象系统基于角色的访问控制模型研究  

RESEARCH ON ROLE-BASED ACCESS CONTROL MODEL IN OBJECT-ORIENT SYSTEM

作　　者：孙军红[1] 李娟[1] 

机构地区：[1]首都师范大学数学科学学院,北京100037

出　　处：《计算机应用与软件》2009年第10期33-35,共3页Computer Applications and Software

基　　金：国家重点基础研究发展计划项目(2006CB805902)

摘　　要：针对面向对象系统,提出面向对象的基于角色的访问控制模型。本模型通过在模型中添加角色类,并描述了角色类的继承关系,从而有效地减少了面向对象系统中类和类之间的关系表达,更加便于类和类之间安全策略的描述和管理。描述该模型的信息流控制特征,其能够有效地保障面向对象系统中对象与对象之间消息传递的可控性,防止信息的泄漏。This paper presents a role-based access control model in object-oriented system.The concept of role classes is introduced into the model,and the inheritance relation of role class is described,so it has effectively decreased the relation expression between the classes in object-oriented system,and is more convenient to describe and manage security strategy between the classes.The control feature of information flow is described,it can effectively ensure the controllability of transmission between the objects in object-oriented system to prevent information leak.

关 键 词：角色 访问控制 面向对象 类 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP311.5[自动化与计算机技术—计算机科学与技术]