基于角色的联合授权管理研究

Research on role-based joint authorization administration

通过分析现有授权管理模型中缺乏对管理员权限约束的不足,提出一种能够满足联合管理需求的基于角色的联合授权管理模型。依据被管理对象定义了多种管理角色并对其职能进行了合理划分,进而给出了联合管理操作及规则的定义。在模型的实现架构中给出了各管理模块的功能,最后通过实例描述了联合管理过程。分析结果表明,联合管理架构具有较强的灵活性,在有效提高权限管理的安全性的同时能够满足对授权管理效率的需求。

The lack of restriction on administrator＇s permissions in existing authorization administration models is analyzed,and a rolebased joint authorization administration model is proposed,which can satisfy the requirement of joint administration.Several administrative roles are defined and their authority is divided according to the administrated entities,moreover,the joint administrating operation and rules are defined.In the implementation framework of the model the function of modules and joint administrating policy are described through an instance.Analysis shows that the joint administrating framework has high flexibility,which enhances security of managing permissions and meets the requirement of administrating efficiency.