角色互斥实现访问控制模型职责分离原则  

The Implement of the Principle of Separation of Duties in Access Control Model Based on Exclusive Role

作　　者：李必云[1] 石俊萍[2] 

机构地区：[1]吉首大学数学与计算机科学学院,湖南吉首416000 [2]吉首大学物理科学与信息工程学院,湖南吉首416000

出　　处：《电脑与电信》2009年第10期36-37,共2页Computer & Telecommunication

摘　　要：在RBAC模型的基础上,提出一种利用角色互斥的方法来实现职责分离原则,将角色互斥分为静态和动态互斥并给出形式化描述;并进一步将权限在角色之间共享的约束关系划分为四种情况,分别进行了形式化描述。Based on Role-Based Access Control Model, a new method based on mutually exclusive roles is proposed to implement separation of duties. Mutually exclusive roles are classified to two kinds： static and dynamic, and the static and dynamic mutually exclusive roles are described formally. And further competence in the role will be shared between the constraint relations are divided into four cases, which are formally described respectively.

关 键 词：访问控制 角色互斥 职责分离 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]