摘要
在研究传统RBAC访问控制模型的基础上,提出了一种应用于图纸管理系统的RBAC模型,详细讨论了安全控制中的资源对象、权限划分与角色定义等概念,对RABC基本模型进行扩展。根据用户的需求,建立了图纸管理系统的权限划分方法,并设计出数据库的逻辑结构且对数据库的设计过程和思路进行了详细的论述。系统的实际应用结果表明:采用RABC模型的图纸管理系统避免了用户和权限的直接联系,很好地实现数据库的安全访问。
Based on the research of the access control model RBAC, a RBAC model which applies to the blueprint management system is presented, the concept of resource object, purview division and role definition for the security control is discussed in detail and the RABC basic model is extended while designing this new model. According to customer needs, the purview division method of the blueprint management system is established, the logical structure of the database is designed, as well as the process and ideas of designing the database of the blueprint management system are elaborated. The actual application shows that the blueprint management system using the RABC model could avoid the direct connection between the users and privileges. The database security access was realized.
出处
《现代电子技术》
2010年第18期104-105,109,共3页
Modern Electronics Technique
关键词
访问控制
图纸管理
数据库模型
基于角色
access control
blueprint management
database model
role-based access control
