基于分级管理的权限控制模型的设计与实现

Design and Implementation of Access Control Model Based on Classification Management

针对RBAC模型中对信息的访问控制不足,权限控制过于混杂,本文从分析企业管理结构入手,模拟其内部信息流转过程,引入"表征"这一概念,并在角色和表征中各抽取出3个基本属性,得出基于分级管理的权限控制模型,并给出实现方式。该模型对传统的访问控制模型进行有效扩充,在实际运行中情况良好,为权限控制的研究提供一种新思路。

In order to overcome the insufficient access control for information and the complex operation in the model of RBAC,a new access control model based on classification management is put forward.It startes from the analysis of corporate management structure,then simulates the process of internal information flow,and introduces the concept of ＂representation＂,extractes three basic attributes in the role and characterization,at last draws this model and gives its realization.The model is an effective expansion for traditional access control model,it performs well in practice,and provides a new idea for the research of access control.