OA系统中RBAC扩展模型的研究与实现  

Research and implementation of extended RBAC model in OA system

作　　者：安沛[1] 王春玲[1] 

机构地区：[1]西安工程大学计算机科学学院,陕西西安710048

出　　处：《西安工程大学学报》2015年第1期78-83,共6页Journal of Xi’an Polytechnic University

基　　金：西安市人才服务中心资助项目(2013K04-12)

摘　　要：针对传统基于角色的访问控制(Role-based Access Contion,RBAC)模型在授权管理上的缺陷,结合某人才服务中心OA系统对权限控制的需求,提出了一种扩展的RBAC模型.首先,用户组的引入有效避免了在大型应用系统中权限和角色分配的较为繁杂的工作.其次,基于三权分立的原则,将管理员分为系统管理员、安全管理员和审计管理员,避免了超级管理员权限过大所带来的问题.同时,采用独立的安全审计,对用户及管理员的操作进行记录,防止非法操作和滥用权力.在OA系统中应用该扩展RBAC模型,进一步增强了系统的安全性与可靠性.To deal with the defects of authorization management in traditional RBAC model,combined with the OA system rights control requirements of a service center,an extended model is proposed.First the complicated work about rights and roles management was alleviated effectively by the introduction of user group in the large-scale application system.In oder to avoid the problems brought by the super administrator privileges,the administrator can be divided into system administrator,security administrator and audit administrator based on the principle of separation of the three powers.Meanwhile,independent safety audit was used to record the operation of users and prevent illegal operation and abuse of power.In OA system,the expanded model of RBAC could improve the system′s safety and reliability.

关 键 词：OA系统 扩展RBAC模型 用户组 三权分立 安全审计 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]