细粒度同异步偏序权限建模角色访问控制模型  

A fine-grained RBAC application framework supporting poset and sync/async permission's relation modeling

作　　者：刘鹏远[1,2] 李彤[3] 孙宝林[1] 蒋国银[1] 

机构地区：[1]湖北经济学院信息管理学院,湖北武汉430205 [2]华中科技大学计算机科学与技术学院,湖北武汉430074 [3]云南大学软件学院,云南昆明650091

出　　处：《云南大学学报（自然科学版）》2014年第4期504-511,共8页Journal of Yunnan University(Natural Sciences Edition)

基　　金：国家自然科学基金(60973085)

摘　　要：角色访问控制的应用提高了系统易用性和健壮性.分析了RBAC模型,指出其在细粒度和表达能力等方面的一些缺陷,结合UML对其重构,提出支持偏序权限建模的细粒度面向对象RBAC模型,基于该模型结合部分GoF模式设计了通用应用框架.与其它应用框架相比有着良好的通用性,支持权限关系的同异步及偏序关系表达,并在细粒度动态访问控制上具有更好的灵活性和效率.The RBAC （Role Based Access Control） application improved system usability and robustness. This paper analysised the RBAC model, and pointed out some deficiencies in its fine - grained. Combined with UML modeling, RBAC model was refactored. It put forward to object oriented RBAC model （ OORBAC ） with ability to tiny fine-grained access and supporting permission poset. Based on OORBAC model and combined with some GoF patterns, a common framework was designed. It is superior in synchronous/asynchronous and poset permission relation＇s expression,and supports dynamic access control on fine granularity more flexibly and efficiently.

关 键 词：角色访问控制 细粒度 同异步 偏序 GoF模式 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]