基于角色扩展的RBAC模型  

Role-extended-based RBAC model

作　　者：蔡婷[1] 聂清彬[1] 欧阳凯[2] 周敬利[2] 

机构地区：[1]重庆邮电大学移通学院计算机系,重庆401520 [2]华中科技大学计算机学院,武汉430074

出　　处：《计算机应用研究》2016年第3期882-885,共4页Application Research of Computers

基　　金：重庆市本科高校"三特行动计划"特色专业建设项目(渝教高(2013)49号);重庆市教委科学技术研究项目(KJ1402002)

摘　　要：针对基于角色的访问控制(RBAC)模型在模拟复杂组织结构和权限继承关系方面的不足,提出了基于角色扩展的RBAC模型——MR-RBAC。该模型在角色集和权限集之间引入了最小角色集,并形式化定义了模型的基本集合和相关函数;同时还深入研究了扩展模型中的角色权限类型与角色关系,给出了最小角色的概念及其生成算法。分析表明,MR-RBAC模型改善了传统模型的角色层次结构和权限继承关系,具有授权粒度细、可伸缩性、可扩展性、安全等优点。最后模型性能测试表明原型系统在引入最小角色划分后对于系统时间性能的影响不大。In view of these shortcomings in describing permission inheritance relationships and simulating the complex organizations with the traditional role-based access control（ RBAC） model,this paper proposed a role-extended-based RBAC model（ MR-RBAC）. In this model,it introduced mini-roles between roles and permissions and formally defined the model＇s basic sets and relevant functions. Meanwhile,it also deep researched the types of roles＇ permissions and the relationships of roles in the extended model,and addressed the concept of mini-roles and a generation algorithm of roles. Analysis shows that MRRBAC model improves roles＇ hierarchy structure and permission inheritance,which introduces such advantages of fine-grained authorization,scalability,expandability and security. Finally,a test for model＇s performance indicates that the impact on time performance of prototype system is not seriously after classifying the mini-roles.

关 键 词：RBAC 扩展模型 最小角色 角色层次 权限继承 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]