基于角色访问控制的数据库安全模型研究

Research on Role-based Database Secure Access Control

目前比较成熟的安全模型大部分是访问控制策略模型,用于描述与维护系统中数据的保密性和完整性。基于角色的访问控制(RBAC)借鉴了人们熟知的用户组、权限组以及职责分离的概念和应用,以角色为中心的权限管理更符合公司和企业的实际管理方式,所以RBAC模型的研究和应用发展得非常快。通过给用户分配恰当的角色,使角色拥有一定的权限成为访问控制的主体,可以提高管理效率。介绍了基于角色的出租车管理系统的部分设计;阐述了模块设计与应用和数据库的设计理念;成功地实现了对不同角色的安全访问控制,有效地解决了安全访问控制问题。

Access control policy model is at present an safe and relatively mature control way, used to describe and maintenance of the confidentiality of data in the system. Role based access control is drawing a known user group , permissionsgroup and the concept of separation of duties and applications . The paper discusses a database security scheme based on RBAC, which relates access privilege and role, and through assigning to the user the suitable role,makes the role a mainbody of access control thus enhancing the management efficiency. In the paper, system design, database design is describes based on role in the taxi service quality assessment system. Thus, the secure access control on the different rolesis realized and the problems of secure access control effectively solved.