摘要
信息安全技术领域一个非常重要的方面是访问控制。在大型的分布式协同系统中,用户与角色的数量众多,关系复杂,RBAC模型存在一定的局限性。以基于角色的访问控制模型为基础,针对分布式协同环境下的特征,将RBAC在分布式协同环境下进行了扩展,提出一种利用角色互斥的方法来实现职责分离原则,将角色互斥分为静态和动态互斥并给出形式化描述,使得扩展后的模型在权限方面提高了安全性。
Access control is avery important research direction of the information security field. In large network-based distributed collaborative application systems, there are large quantity of users and roles, and the relations of users and roles are quite complex, thus RBAC is not suitable for this situation. Based on RBAC model and according to characteristics of the distributed collaborative circumstance, the RBAC model is extended in the distributed collaborative circumstance. A new method based on mutually exclusive roles is proposed to implement the separation of duties. Mutually exclusive roles are classified into two kinds as static and dynamic, and formal descriptions of the static and dynamic mutually exclusive roles are given in this paper.
出处
《通信技术》
2010年第1期84-85,88,共3页
Communications Technology
关键词
协同环境
访问控制
职责分离
collaborative circumstance
access control
separation of duties
