一种基于角色和属性的访问控制模型  

An Access Control Model Based on Roles and Attributes

作　　者：彭飞[1] 吴大胜[1] 黎娟[2] 

机构地区：[1]扬州职业大学,江苏扬州225000 [2]江苏联合职业技术学院,江苏扬州225000

出　　处：《扬州职业大学学报》2017年第2期37-39,共3页Journal of Yangzhou Polytechnic College

摘　　要：浅析基于角色的访问控制模型(RBAC)在实际应用中的不足,在RBAC理论基础上提出了一种基于角色和属性的访问控制模型(RABAC),在RBAC中加入属性概念,使得授权更灵活且符合最小权限原则,利用形式规约对RABAC进行描述,理论上验证其有效性和可行性。This paper analyses the insufficiency of RBAC in practical application. On the basis of RBAC theory,it presents an expanded role and attribute-based access control（ RABAC）,introducing the concept of attribute into RBAC makes authorization more flexible and consistent with the principle of minimum authority.Meanwhile,it validates its effectiveness and feasibility in theory by using formal specification to express RABAC model.

关 键 词：角色 属性 RBAC 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]