基于任务的RBAC模型设计与应用  

Designing and application of Task-RBAC model

作　　者：贾晓辉[1] 韩玉民[1] 

机构地区：[1]中原工学院软件学院,河南郑州450007

出　　处：《微型机与应用》2014年第2期78-81,共4页Microcomputer & Its Applications

基　　金：河南省教育厅科学技术研究重点项目(12A520051)

摘　　要：由于软件开发过程中设计不科学而造成的软件不安全使用、软件维护工作量大等可维护性问题,是软件开发中经常遇到的问题。RBAC减少了授权管理的复杂性,提高了访问控制的安全性,从而提高了系统的可维护性,是目前公认的具有发展潜力的访问控制技术。在RBAC模型研究的基础上,建立了T-RBAC模型,用户对信息对象的访问权限可随执行任务的上下文环境变化,具有很好的安全性,并应用于网络课堂应用系统,提高了系统的可维护性,具有一定的推广应用价值。Due to unscientific designing , problem such as insecurity software use and lots of software maintenance becomes more and more in software development . RBAC policies reduce authorization management complexity , enhance the safety of access control and improve system ’ s maintainability consequently , then RBAC policies becomes the accepted potential access control tech-nology . A model named T-RBAC is established based on the research of RBAC model in the paper , the access authority changes with the context which has better security , then the application of T-RBAC is discussed in net course system which can improve the system ’ s maintainability and can be extended .

关 键 词：RBAC T-RBAC 软件工程 软件维护 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]