一种基于信任和角色的混合权限控制方法  

An mixed access control method based on trust and role

作　　者：高首都 张长书 王宇 张中原 高晓东 

机构地区：[1]河南省电力勘测设计院,郑州450007

出　　处：《测绘科学》2012年第2期80-82,共3页Science of Surveying and Mapping

摘　　要：本文在分析分布式大众地理信息系统中访问控制的特点,以及RBAC模型不能满足分布式系统需求的基础上,提出了基于角色和信任的混合访问控制方法:在RBAC模型的角色授权基础上,加入了用户信任度,对RBAC模型进行了有效的扩展。该方法有效解决了系统对用户分配权限后无法控制用户非法操作的弊端,并且对模型进行了实验验证。The data security of distributed GIS system, especially access control, has become an indispensable function component in the practical application of distributed system. However, current approaches to access control are mostly based on individual user identity; hence they do not scale to distributed systems. In this paper, an access control mechanism which is the combination of trust and role-based access control model was presented. The extended model could meet the need to manage and enforce the strong and efficient access control technology in large-scale environments.

关 键 词：分布式地理信息系统 权限控制 角色 信任 

分 类 号：P208[天文地球—地图制图学与地理信息工程]