信息系统中角色交叉集散授权模型

Role-crossed Distributed Authorization Model in Information System

为了能够准确、有效、安全的为信息系统用户授权,针对角色权限交叉带来管理混乱的现象,构建了角色交叉访问控制模型(Role-Crossed Access Control,简称RCAC).为了保证授权的可操作性和准确性,构建了向上查询授权人的集散授权方式,进而提出角色交叉集散授权模型.该方法已经在某信息系统得到应用.

In order to authorize the information system users exactly, effectively and safely, the RoleCrossed Access Control （RCAC） model is built aiming at the managing disordered condition by the crossed role and privilege. To ensure the maneuverability and veracity of authorization, this paper builds the authorizer up-searching distributed authorization mode, and then puts forward the role-crossed distributed authorization model, so as to solve the role privilege-crossed authorization managing problem effectively. As used in an information system successfully, this method proves to be effective.