电子商务环境下RBAC模型的扩展

An Extended Role based Access Control Model in the E-commerce System

随着电子商务系统规模的膨胀,基于角色的访问控制模型面临着角色庞大、管理复杂等问题.在提出用户组角色的概念和规则的基础上,扩展了RBAC访问控制模型,给出其在XACML框架下的描述与设计,最后用Java语言实现了扩展的RBAC模型.

As the scale of e-commerce expands rapidly,the role-based access control（RBAC）model is expected to play a tremendous role in complexity of user management issue.The definition and rules of user group role（UGR）are proposed,and the extended RBAC model under eXtensible access control markup language（XACML）is descripted and designed.The extended RBAC model is successfully created and programmed using JAVA.