信息系统中基于角色的权限控制模型研究与应用

RESEARCH AND APPLICATION OF ROLE-BASED ACCESS CONTROL IN INFORMATION SYSTEM

基于RBAC的访问控制模型能有效弥补DAC和MAC的不足,而多数信息系统要求用户权限必须灵活控制、统一管理、可维护。据此提出改进的RBAC控制模型,即将全部数据资源以业务功能模块表示,并授予各预设的角色,用户临时需要的权限则直接授予或撤销。该改进方法已经在实际项目中得到了应用。

Role-Based Access Control （RBAC） model can make up the insufficiencies of DAC （discretional access control） and MAC （ mandatory access control）, whereas most information systems seek the user＇s privilege must be flexible control, uniform manage and maintainable. A new betterment model for RBAC is presented based on the analysis of the speciality access control in information system. All data resource are expressed by operation function modules, and privileges are awarded to roles which are setup beforehand, user＇s temporary privilege can be granted or revoked. The improved model has been applied in a project.