摘要
在典型RBAC的基础上,提出一种基于角色和部门的两级访问控制模型DRBAC,将部门从角色的一个属性独立抽象出来,使角色和部门共同决定主体对客体的访问权限,并将授权过程事务化,以降低操作要求。
A new access control model DRBAC based on role and department is proposed, which extends the traditional role-based access control (RBAC) model. The new model adds the abstraction of the department property and simplifies the operational process by authenticating management based on transaction.
出处
《武汉科技大学学报》
CAS
2006年第4期398-400,共3页
Journal of Wuhan University of Science and Technology
关键词
角色
部门
权限
访问控制
role
department
permission
access control