基于角色的参数化访问控制模型  

Parameterized Role based on Access Control Model

作　　者：李峰 LI Feng(The Technology Center,Hubei Sanjiang Space Hongfeng Control Limited Company,Xiaogan,Hubei,432000,China)

机构地区：[1]湖北三江航天红峰控制有限公司技术中心,湖北孝感432000

出　　处：《新疆师范大学学报（自然科学版）》2023年第1期1-5,共5页Journal of Xinjiang Normal University(Natural Sciences Edition)

摘　　要：文章针对基于角色的访问控制(RBAC)模型在细粒度权限控制上存在的不足,对RBAC模型进行了扩展,提出了一种将权限划分为功能权限和数据权限的改进模型。该模型将数据权限从权限中独立并抽象出来,使功能权限和数据权限共同决定主体对客体的访问权限,从而实现细粒度的访问控制,改善了RBAC模型权限管理模式。同时,为提高角色授权效率,提出了一种参数化角色管理方法,增加了新建角色的默认指派,使得角色的授权过程由映射关系的逐个分配转变为对部分映射关系的修改和完善,降低了授权管理的复杂性,增强了权限分配的灵活性。Aiming at the shortcomings of the Role Based Access Control(RBAC)model in fine-grained permission control,the RBAC model is extended,and an improved model is proposed to divide permissions into functional permissions and data permissions.The model abstracts data permissions from permissions independently,so that functional permissions and data permissions jointly determine the access permissions of subjects to objects,thereby realizing fine-grained access control and improving the RBAC model permissions management model.At the same time,in order to improve the efficiency of role authorization,a parameterized role management method is proposed,which adds the default assignment of new roles,makes the role authorization process change from the assignment of mapping relationships one by one to the modification and improvement of partial mapping relationships,reduces the complexity of authorization management,and enhances the flexibility of permission allocation.

关 键 词：角色 访问控制 RBAC 数据权限 参数化 P-RBAC 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]