面向资源所有者访问控制模型的设计与实现  

DESIGN AND IMPLEMENTATION OF RESOURCE OWNERS-ORIENTED ACCESS CONTROL MODEL

作　　者：费洪晓[1] 陈炯[1] 邓小鸿[2] 陈志刚[1] 

机构地区：[1]中南大学软件学院,湖南长沙410083 [2]江西理工大学应用科学学院,江西赣州341000

出　　处：《计算机应用与软件》2012年第6期26-28,45,共4页Computer Applications and Software

基　　金：国家自然科学基金项目(61073186);湖南省科学技术厅科研项目(2010TP1001)

摘　　要：传统访问控制模型由于其主体的单一性,其策略的制定和实施均无需考虑其他主体,因此当资源所有者和使用者是两个主体时,传统模型无法同时体现两者的安全需求。以区域医疗信息共享系统为应用背景,针对系统中资源使用者与资源所有者分离时传统访问控制模型仍然是一种粗粒度管理的缺陷,在RBAC模型基础上构造一种面向资源所有者的访问控制模型O-RBAC,引入客体类和角色域等概念,使资源所有者和资源使用者能够共同对资源进行有效权限管理,从而达到资源在所有权使用权分离下的细粒度管理。Traditional access control model does not need to consider other subjects when establishing and implementing strategy due to the singularity of its subject.So,when the resource users and owners are of two subjects,it can not reflect the security requirement of both.Taking the Regional Healthcare Information Sharing System as the application background,and aiming at the defect that the traditional access control model is still a coarse-grained management when the owners and the users of the resource in system are in separation,we construct a resource owners-oriented access control model based on RBAC,O-RBAC（Owners-Based Access Control）,it introduces the concepts of object class,role domain and so on,enables both the owners and users of the resource can jointly manage the permission of resource effectively,so that achieves the management of fine-grained on resource in condition of the separation between the ownership and the usufruct.

关 键 词：区域医疗 信息共享 访问控制 细粒度 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]