扩展的基于角色访问控制模型的设计

Design of Extended Role-Based Access Control Model

协作系统的动态特性要求特定访问主体能够在安全监控下自主地进行访问主体角色关系配置 在研究开发的扩展的基于角色访问控制模型的基础上 ,应用对象建模方法对模型应用的关键问题提出了解决方案 ,包括一致性问题、动态监控、约束处理、安全控制等 该研究为扩展的角色的访问控制模型的实际应用提供指导 ,它可以应用到大型复杂系统 ,特别适用于动态协作系统 ,结合认证技术 。

Collaborative work system requires specific users being able to assign some other system users to specific roles under the control of system. We developed an authorization supported role-based access control model named ASRBAC to satisfy this requirement. In order to realize this model in real world, this paper discusses some important problems which are critical to model the realization using object-oriented methodology, including consistency problem, dynamic monitor, constraint management and security control. This model can be applied in large-scale systems, especially large collaborative work system. Integrated with authentication technology, it can protect information security in large systems.