基于扩展角色访问控制的普适计算访问控制模型  

Pervasive computing access control model based on extended RBAC

作　　者：孙凌[1] 辛艳[2] 罗长远[2] 

机构地区：[1]河南商业高等专科学校计算机应用系,郑州450044 [2]信息工程大学电子技术学院,郑州450004

出　　处：《计算机应用》2010年第4期1045-1047,1052,共4页journal of Computer Applications

摘　　要：针对普适计算访问控制对客体部分动态管理的需要,分析了现有扩展基于角色的访问控制(RBAC)的不足,提出一种新的扩展RBAC模型。模型引入客体与客体的关联,使得权限既可以通过角色也可以通过客体获得,并采用描述逻辑对模型访问控制过程进行了形式化描述。该模型能够实现细粒度的动态授权,解决了因决策的固有性导致角色数量过多、授权不灵活的问题。Concerning the needs of dynamic management for object in pervasive computing access control and the shortages of the existing Role Based Access Control（RBAC）,the paper presented an extended RBAC model.In the model an associated object was presented,so the permissions can be obtained through roles and objects.The access control processes were described with the description logic.The model considers the authorization from the point of view of object,and resolves the problems that the roles are too many and the authorization is not flexible caused by the inherence of decision.

关 键 词：普适计算 访问控制 基于角色的访问控制 动态描述逻辑 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]