资源相关的RBAC模型扩展  

EXPANDING RESOURCE-RELATED RBAC MODEL

作　　者：龙际珍[1] 宋云[1] 晏弼成[1] 

机构地区：[1]长沙理工大学计算机与通信工程学院,湖南长沙410114

出　　处：《计算机应用与软件》2010年第7期119-121,共3页Computer Applications and Software

基　　金：湖南省科技术基金项目(2009JT3003);湖南省教育厅基金项目(07C084)

摘　　要：针对RBAC系统中受访客体描述不够,权限系统相关的缺陷,文章提出一种资源相关的扩展RBAC模型。模型在RBAC的基础上加强客体描述,引入资源、特权和权限的资源分配(RA),从而实现权限的系统无关,增强模型的通用性。此外,模型定义用户资源访问约束特性(RAC)来减小管理粒度,实现用户对已授权资源的部分访问或操作。最后提出模型B/S下的一个实现。An extended RBAC model,which is resource-related,is proposed in the paper against the defects in RBAC system including inadequate description on the objects to be visited and the correlation of privilege and permission system,.This model enhances the objects description,resource introduction,privilege and permission resource assignment（RA） based on RBAC so as to achieve the system independent from the permission and to improve the universality of the model.In addition,user resource access constraint property（RAC） is defined in the model to reduce the management granularity and to realise partial access or operation of the users on authorized resources.At the end of the paper,an implement under model B/S is presented.

关 键 词：系统安全 访问控制 RBAC 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]