基于角色访问控制模型的研究与改进

Research and Application of Role-Based Access Control

权限管理系统是重复开发率最高的模块之一。本文借鉴了RBAC96模型、ARBAC97模型的核心思想与优点并进行改进,提出了扩展的基于角色的访问控制模型E-RBAC模型。深入研究了权限管理相关理论与技术,比如管理域理论、角色管理理论、非集中式管理理论等,在此基础上提出了扩展模型E-RBAC模型。模型在实际应用中实现了对资源和操作的访问控制;支持以"组"为单位进行权限分配;可以灵活的管理和配置权限。最后以"通用网络办公平台"为案例阐述扩展模型在Web平台中的应用。

Authority management system is one of the modules,which have the highest repetition frequency.This paper references the advantages of the RBAC96 model and the core of the ARBAC97 model,and then puts forward the extended role based access control model,E-RBAC model.By researching the theory and technology about the authority management.for example management field,role field,non-centralized management.E-RBAC model is proposed.It realizs the access control to resource and operation.and supports the group of authority allocation to manage and configuration the authority.At last it introduces the application of Web platform in ＂general network office platform＂.