摘要
基于角色访问控制(RBAC)被普遍认为是当前最具有发展潜力的访问控制策略。RBAC模型通过角色将用户和权限相联系,极大降低了授权管理的复杂性,解决了具有大量用户和权限分配的系统中管理复杂性问题。基于角色的代理授权模型是基于角色的访问控制研究的一个热点。文中对现有的几种基于角色的代理授权模型进行了比较研究,系统分析了它们的优缺点及其差异,对基于角色的代理授权模型研究和应用有一定的参考价值。
Role-based access control (RBAC) has been generally accepted as one of the most promising access control policies.In RBAC,access rights are associated with roles,and users are assigned appropriate roles thereby acquiring the corresponding permissions.RBAC is a well-known solution for decentralized permissions administration.Role-based delegation model (RDM) is a hotspot of RBAC research.In this paper,several typical role-based delegation models are analyssed,and the difference between them are also presented.It has some value for studying and implementation of the role-based delegation models.
出处
《微机发展》
2004年第11期126-129,共4页
Microcomputer Development
基金
国家自然科学基金资助项目(90204012)
陕西师范大学重点科研项目(2002995105)
关键词
访问控制
角色
代理粒度
代理深度
代理策略
access control
role
delegation granularity
delegation depth
delegation policy