基于任务和角色的访问控制(T-RBAC)模型及其实现技术

Task-Role Based Access Control Model and its realization techonology

RBAC和TBAC是当前比较先进的访问控制技术,但仍有着各自的局限性。基于任务和角色的访问控制(T-RBAC)模型集中RBAC和TBAC两类访问控制的优势,选取任务和角色作为两个基本特征,建立在对任务分类的基础上,既适用于工作流任务,又适用于非工作流任务。依据T-RBAC模型定义,设计了企业环境下基于任务和角色的访问控制模型的总体框架,概述了主要功能模块和系统应用的主要工作流程。

Though RBAC and TBAC are the more advanced access control techonology at present, they have their own limitations. Task -role based access control model has the advantages of both RBAC and TBAC. It selects task and role as its two basic charateristics. Built on the basis of task classification, it qs applicable for both workflow and non - workflow task. Based on the defifition of T - RBAC model, this article designs the general framwork of task and role based access control model on enterprise environment. It gives a brief account of the main workflow of the central function module and system application.