基于RBAC的动态授权模型在SSL VPN系统中的应用  

Application of RBAC-based dynamic authorization model in SSL VPN system

作　　者：谷小青[1] 曹晴[1] 樊彩霞[1] 袁超[1] 

机构地区：[1]河南农业大学理学院,河南郑州450002

出　　处：《现代电子技术》2014年第21期92-93,97,共3页Modern Electronics Technique

摘　　要：授权模块是SSL VPN系统的基础模块,主要是对系统内的用户进行访问控制。动态授权模型是在RBAC的基础之上,为了满足SSL VPN系统的访问控制需求,引入了客户端的安全状态值,根据用户的角色和安全状态值来判定用户的最终访问权限,用于控制不同安全状态客户端的访问请求,进一步提高了SSL VPN系统的安全性能。The authorization module is the basic module of SSL VPN（security socket layer virtual private network）system,which mainly executes the control of user access in the system. The dynamic authorization model is based on the RBAC to meet the needs of access control in SSL VPN system. The safety state value in the client is introduced in the system to determine the final access authority according to the user′s role and safety state value. It is used to control the client access requests in different security status,so as to further improve the safety performance of SSL VPN system.

关 键 词：SSL VPN系统 动态授权 RBAC 安全状态 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]