基于RBAC模型的认证和访问控制系统

Authentication and Access Control System Based on RBAC Model

安全模型是高层次上的概念模型，反映了一定的安全策略，基于角色的存取控制(RBAC)模型易于管理、方便灵活，适合功能强大、结构复杂的公钥基础设施PKI。文章介绍了RBAC模型，以此模型构建认证和访问控制系统，阐述了系统中的角色和授权，说明了各种会话的认证和访问控制，列举了角色的约束条件。

Security models are high-level concept models reflecting some security policy. Role-based access control models are easy to manage and convenient to use, so they adapt to powerful and complex PKI. The paper constructs authentication and access control system using RBAC model, and introduces roles and permissions in this system, describes authentication and access-control methods of each session, and lists constraints of roles.