基于TRBAC的分布式指挥系统访问控制建模  

Model Design of Task-Role-Based Access Control in Distributed Command System

作　　者：徐宇茹[1] 李瑛[2] 郭天杰[2] 

机构地区：[1]海军航空工程学院训练部,山东烟台264001 [2]海军航空工程学院兵器科学与技术系,山东烟台264001

出　　处：《海军航空工程学院学报》2010年第4期406-410,共5页Journal of Naval Aeronautical and Astronautical University

摘　　要：介绍和分析了2种主流访问控制技术——基于角色的访问控制及基于任务的访问控制。针对现有模型的不足,结合某分布式系统的复杂访问控制需求和处理特点,建立了基于任务—角色的访问控制TRBAC模型,阐述了模型对最小权限原则、权限分离原则、角色层次关系的支持。The characteristic and applicability spectrum of some recent models such as DAC, MAC, RBAC and TBAC was demonstrated. Access control requirement in a certain distributed control system was analyzed in detail. To the deficiency of the exiting models, in order to improve the security and practicability of the distributed control system, a new type model, TRBAC （task-role based access control） model was built .The configuration and characteristic of the model was described. The support of least privilege, separation of duties, data abstraction and role hierarchies in the model were explained.

关 键 词：分布式指挥系统 基于角色的访问控制 基于任务的访问控制 基于任务—角色的访问控制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]