基于角色和活动的数字校园访问控制模型

Role and activity based digital campus access control model

为建立动态、灵活、高效的访问控制模型,针对建设高校校级统一信息系统时角色访问控制(RBAC)模型的不足,引入参与、动作与活动等概念对基于角色的访问控制模型进行扩展,提出基于角色与活动访问控制(R-ABAC)模型的模型结构、组件关系及框架结构.应用结果表明:该模型可准确地描述教学、科研、管理、服务各种活动中的授权关系,并较好地适应信息集成阶段数字校园身份与权限管理的需求.

A role and activity based on access control （R-ABAC） model with its infrastructure, component relationship and framework was proposed to build more dynamic, flexible and suitable access control model for the innate limitations of rolebased access control （RBAC） model in university-level unified information system through extending the traditional RBAC model with the notion of participation, act and activity. Application results show that R ABAC model can describe the authorization relationship of actions in teaching, research, administration and service exactly, and it can also implement identity and access management system in digital campus of information integrating stage.