一种层次信任的多粒度RBAC扩展模型  

An expanded RBAC model of multi-granularity based on trust hierarchies

作　　者：卢清平[1] 苏守宝[1,2] 郁书好[1,3,4] 杨柳[1] 

机构地区：[1]皖西学院信息工程学院,安徽六安237012 [2]金陵科技学院信息技术学院,江苏南京211169 [3]合肥工业大学管理学院,安徽合肥230009 [4]合肥工业大学计算机网络系统研究所,安徽合肥230009

出　　处：《山东大学学报（理学版）》2013年第7期51-55,共5页Journal of Shandong University(Natural Science)

基　　金：国家自然科学基金资助项目(61075049;61375121);国家科技型中小企业技术创新基金资助项目(12C26243403509);安徽高校省级自然科学研究项目(KJ2010B268;KJ2011A268);六安市委托产学研重点项目(2012LWB010;2012LWA018)

摘　　要：针对企业级网络应用集成环境中授权和访问控制要求,提出一种以信任角色授权的分层和多粒度的访问控制扩展模型(EmRBAC),结合NIST-RBAC的标准模型,利用可信凭证扩展用户和角色之间的层次,增加角色的信任层次,并从系统、应用、操作对象的功能和级别、操作数据的时间周期等多个维度对标准模型进行了访问权限的粒度细化,加强访问权限的多粒度控制,并通过角色状态分层预处理,降低权限判别时的复杂性,提高访问控制效率。最后以开源门户eXo Platform为实验平台,给出了模型的访问控制流程以及应用实例,以验证提出模型的有效性。Based on the application integration environment for enterprise network authorization and access control require- ments, a trust role authorization by stratified and multi-granular access control extension model （EmRBAC） is proposed, which is combined with NIST RBAC standard model, use the trusted credentials extension level between users and roles, and increase the role of trust level. From the system, applications, functions and operation of the object level, operating data time period and many other dimensions of the standard model, the elaboration of granularity of access rights is carried out. Through the role of the state stratification pretreatment reduced privileges determine the complexity and increase the efficiency of access control. Final, as an open source portal exobiology platform for experimentation platform, the model of access control processes and application examples are obtained to verify the effectiveness of the proposed model.

关 键 词：扩展RBAC 信任层次 角色状态 多粒度 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393.08[自动化与计算机技术—计算机科学与技术]