基于角色访问控制的约束模型研究  

Survey on Module of Constraint in Role-based Access Control

作　　者：白少云[1] 白尚旺[1] 张少波[1] 

机构地区：[1]太原科技大学计算机科学与技术学院,太原030024

出　　处：《太原科技大学学报》2016年第4期270-276,共7页Journal of Taiyuan University of Science and Technology

基　　金：太原科技大学校研究生创新基金(20145023)

摘　　要：基于角色的访问控制(Role-Based Access Control,RBAC)是根据用户角色确定访问权限,防止未经授权的用户访问信息资源。目前。尽管有许多不同类型的扩展RBAC,但是,没有一个通用的模型来定义不同类型的约束。本文基于统一建模语言(Unified Modeling Language,UML)和对象约束语言(Object Constraint Language,OCL),采用模型驱动的工程方法,构建了一个通用的满足不同约束访问控制的RBAC模型,简称Uni-RBAC.该模型通过在不同实体上定义OCL约束,来满足多种类型的授权要求,为系统在设计态和运行态的访问控制要求提供了良好的模型支撑。Access rights are determined based on the user＇s role in role-based access control （RBAC）, which pre- vents unauthorized users from accessing information resources. Although there are many different types of expan- sion RBAC currently, there is no universal model to define different types of constraints. In this paper, the model- driven engineering approach, based on the Unified Modeling Language （UML）and the Object Constraint Language （OCL） ,is used to construct a universal RBAC model to meet different constraints access control, referred to as Uni-RBAC. The model is defined on the different entities with OCL constraints to meet the requirements of various types of authorization, thus providing a good model for access control of a system not only in the design state but al- so in the run-time state.

关 键 词：访问控制 RBAC 统一建模语言 约束 对象约束语言 Uni-RBAC 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]