一种基于扩展RBAC的访问控制模型在SSL VPN系统中的应用  

Application of access control model based on expand RBAC to SSL VPN system

作　　者：徐博[1] 郭淑琴[1] 陆敏飞[1] 

机构地区：[1]浙江工业大学信息工程学院,浙江杭州310032

出　　处：《浙江工业大学学报》2011年第2期177-180,共4页Journal of Zhejiang University of Technology

摘　　要：访问控制是防止非授权访问的一种重要的网络安全手段,基于角色的访问控制模型RBAC是目前主流的访问控制模型之一.从RBAC模型的基本理论出发,结合SSL VPN系统访问控制的需求,在经典RBAC模型的基础上引入了分级和分组的机制,提出一种扩展RBAC模型.该模型引入分级机制,用于控制不同安全状态的客户端的访问请求;引入分组机制,使系统的授权更清晰和简化.在SSL VPN系统中应用该扩展RBAC模型,进一步增强了SSL VPN系统的性能.Access control is one of the important techniques to avoid unauthorized accesses.Role-Based Access Control model is the dominating access control model.Firstly,this thesis analyses the basic theory of Role-Based Access Control model.Secondly,this thesis analyses the requirements of Access Control in SSL VPN system.Thirdly,the thesis introduces the concepts of group and level to expand the RBAC model which we called an Expand Model of RBAC.To make the authorization clear and concise,we introduce the concept of group,while to make the system more safely and effectively,we introduce the concept of level.The Expanded Model of RBAC in this thesis used in SSL VPN system,could improve the system＇s performance.

关 键 词：访问控制 RBAC模型 扩展RBAC模型 SSLVPN 

分 类 号：X131.2[环境科学与工程—环境科学]