一种基于属性值变异的动态角色访问控制模型  

A dynamic role based access control model based on change of attributes

作　　者：张贤玉 徐宗保[2] 吕江华[2] 刘志锋[2] 韦亚兰[3] 

机构地区：[1]镇江市人力资源社会保障信息中心,江苏镇江212000 [2]江苏大学计算机科学与通信工程学院,江苏镇江212000 [3]江苏大学艺术学院实验室,江苏镇江212000

出　　处：《信息技术》2016年第11期69-74,共6页Information Technology

基　　金：国家自然科学基金(61300228)

摘　　要：访问控制是信息安全中保证数据机密性和完整性的有效机制,尤其是基于角色的访问控制模型更是获得了广泛的应用。然而随着云计算、物联网等新型系统的出现,数据呈爆炸式增长,用户数也呈现出急速上升的现象,进而使得传统角色访问控制模型中用户角色的分配与管理的复杂性日益增大,其在扩展性和性能上已经不能满足此要求。文中在传统角色访问控制的基础上,提出了一种新的访问控制模型—基于属性值变异的动态角色访问控制模型。首先对角色添加属性来实现角色由静态到动态的转变,提高了角色访问控制的可扩展性,其次在对资源的操作上引入继承的概念,以避免不必要授权,简化了角色的授权,提高了访问控制系统的性能。Access control is a very important mechanism protecting the confidentiality and integrity of data in the field of information security,and role based access control has been widely used in helping ensure the security of information systems. However,with the advent of cloud computing and Internet of things,data and the number of users rise rapid,which result in the user role assignment and management more complex. The traditional role based access control is unable to meet the requirements of scalability and performance. This paper puts forward a new model of access control,which is called role based access control with attributes. The role can be changed from static to dynamic by adding attributes to roles. In this way the scalability of the role based access control is rised. Secondly,it puts forward inheritance on operation,which can rise the performance of access control by avoiding unnecessary authorization.

关 键 词：角色访问控制 动态角色 操作继承 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]