一种基于角色的访问控制扩展模型

An Expanded Role-Based Access Control Model

基于角色访问控制(RBAC)被普遍认为是当前最具有发展潜力的访问控制策略,已成为信息安全等领域研究的热点之一。文中在经典RBAC96模型的基础上,引入组用户和事务权限的概念,提出了一种扩展RBAC模型ERBAC,它能够有效降低授权管理复杂度,提高基于角色的访问控制效率。文中给出模型的形式化定义和授权规则,然后以基于校园网的教务管理信息系统为背景,对ERBAC模型的应用方法进行了讨论。

Role-based access control (RBAC) has been generally accepted as one of the most promising access control policies, and it has become a hot research topic in the area of information security. By introducing the group user(GU) and transaction permission(TP),a new extended role-based access control model(ERBAC) is presented on the basis of classical RBAC96, the extended model will effectively reduce complication of authorization and improve efficiency of RBAC.A formal definition and the rule of authorization of the new model are introduced,then according to the JWGL Intranet,its application is studied.