面向对象的基于角色访问控制模型的探讨

Research on Object-oriented Role-Based Access Control Model

提出一种应用于分布式系统的面向对象的基于角色访问控制(ORBAC)模型。基于角色访问控制,将权限与角色相关联,用户分配得多个角色从而获得与其关联的权限。引用对象的概念,通过策略控制器集中控制分散管理,为分布式系统提供高效的访问控制机制。模型考虑了静态和动态角色分配,并分析了面向对象访问控制模型的一些动态特性。

This paper provides an object-orien ted RBAC model for distribut ed syste m.In Role-Based Access Control,permissions are associated with role s and users are assigned members of r oles thereby obtaining associated p ermiss ions.We intro-duce the concept of object to provide an efficient access contro l mechani sm for multi-domains distributed sy stem with central-ized control and decentralized management of the policy controller.Thi s model considers sta tic role assign ment and dynamic role assignment,furthermore the an alysis of d ynamic features of model.