一种涉密系统中增强的角色访问控制方案

An Enhanced RBAC Scheme in Classified Information System

针对当前涉密系统对访问控制的要求,文章分析了当前各种访问技术的优势和不足,综合利用自主访问控制和基于角色访问控制在粒度和易于管理上的优点,提出一种增强的访问控制方案,在易于管理的同时,做到对单个涉密人员和涉密文件的有效管控,增加涉密信息系统在访问控制上的安全性。

To satisfy the access control requirements of classified information system, we analyze the advantages and disadvantages of current technologies, take advantage of details that DAC can control and easy management that RBAC can offer, propose a enhanced access control scheme. With easy management, we can manage single classified staff and classified file, strengthen the security of classified information system on access control.