协同环境中基于RBAC模型的访问控制策略

Access Control Strategy Based on RBAC in Collaborative Environment

协同系统具有动态性和群体性的特点,其权限管理比传统软件系统复杂。传统数据库系统中的访问控制机制比较简单,远不能满足协同系统的要求。针对共享资源访问控制策略的授权方式复杂、授权粒度不细致的问题,引入角色机制,把角色访问并发控制策略应用到系统中,设计基于角色的系统功能权限的位映射算法。该算法降低了授权管理的复杂性,增强了系统安全性。

Collaborative system has dynamic and groups characteristics, whose rights management is more complex than the traditional software system. Traditional database system access control mechanism is relatively simple, which is far from satisfying the collaborative system. Aiming at the problems of the complicated authorizing way of access control strategy to shared resource, authorized granularity＇s incompact, this paper introduces role mechanism. It applies role-based access control concurrent strategy to system, and puts forward role-based bit mapping system function right algorithm. The algorithm reduces complexity of authority management efficiently and strengthens system＇s safety.