摘要
分析了访问控制领域的研究现状,简略介绍了基于角色的访问控制、基于任务的访问控制以及其它一些有价值的访问控制策略,并对其思想、特点和存在的缺陷做了讨论;在基于角色和基于任务策略的基础上,着重研究了当前比较热门的基于任务-角色的访问控制策略,并对目前提出的两种基于任务-角色的访问控制模型做了比较,分析了T&RBAC模型的优点;最后对T&RBAC模型提出改良意见,建立了改良模型,并对改良模型做了形式化定义。
The current research in access-control area is analyzed. The role-based access control strategy （RBAC）, the task-based access control strategy （TBAC） and some other valuable access-control strategy are introduced curtly. Their thoughts, characteristics and existing flaws are discussed. On the basis of RBAC and TBAC, the task-role-based access control strategy （T_RBAC）, which is popularly studied recently, is studied intensively, two presently proposed T_RBAC models are compared and the advantages of the T＆ RBAC model is analysed. At last several improved suggestions are proposed to the T＆RBAC model, an improved model is built and defined formally.
出处
《计算机工程与设计》
CSCD
北大核心
2007年第4期800-802,807,共4页
Computer Engineering and Design
