电子政务中的扩展RBAC安全策略研究

Study of Extension RBAC Security Strategy in E-Government

通过对基于角色的访问控制模型(RBAC)与其扩展的研究,该文提出了在电子政务系统中适用的强制性的基于时空约束与角色的访问控制模型(MSTRBAC),该模型在RBAC中引入了强制性授权、时间约束与空间约束的手段,具有安全性完备,授权灵活,实现简单的特点。

Through rob-based access control model（RBAC）and its extension study,put forward mandatory time and space constraints and rolebased access control model（MSTEBAC）in the application of e-government system,this model introduce mandatery,time-bound,space constraint management methods based on the RBAC model,its security is maturity,authorization is flexible,actualization is simple.