A General Attribute and Rule Based Role-Based Access Control Model

Growing numbers of users and many access control policies which involve many different resource attributes in service-oriented environments bring various problems in protecting resource.This paper analyzes the relationships of resource attributes to user attributes in all policies, and propose a general attribute and rule based role-based access control(GAR-RBAC) model to meet the security needs. The model can dynamically assign users to roles via rules to meet the need of growing numbers of users. These rules use different attribute expression and permission as a part of authorization constraints, and are defined by analyzing relations of resource attributes to user attributes in many access policies that are defined by the enterprise. The model is a general access control model, and can support many access control policies, and also can be used to wider application for service. The paper also describes how to use the GAR-RBAC model in Web service environments.

A Cache Considering Role-Based Access Control and Trust in Privilege Management Infrastructure

PMI （privilege management infrastructure） is used to perform access control to resource in an E-commerce or E-government system. With the ever-increasing need for secure transaction, the need for systems that offer a wide variety of QoS （quality-of-service） features is also growing. In order to improve the QoS of PMI system, a cache based on RBAC （Role-based Access control） and trust is proposed. Our system is realized based on Web service. How to design the cache based on RBAC and trust in the access control model is deseribed in detail. The algorithm to query role permission in cache and to add records in cache is dealt with. The policy to update cache is introduced also.

An Extended Role Based Access Control Method for XML Documents

As XML has been increasingly important as the Data-change format of Internet and Intranet, access-control-on-XML-properties rises as a new issue. Role-based access control (RBAC) is an access control method that has been widely used in Internet, Operation System and Relation Data Base these 10 years. Though RBAC is already relatively mature in the above fields, new problems occur when it is used in XML properties. This paper proposes an integrated model to resolve these problems, after the fully analysis on the features of XML and RBAC. Key words XML - RBAC - access control method - RBAC CLC number TP 309 Foundation item: This Research was Partially Supported by the Grants from 863 High Technology Foundation of China (2002AA116030), the National Natural Science Foundation of China (60073014, 60273018), the Key Project of Chinese Ministry of Education (03044) and the Excellent Young Teachers Program of M0E, P.R.C (EYTP)Biography: MENG Xiao-feng (1964-), male, Professor, Ph. D, research direction: web information integration, XML database, mobile database.

General Attribute Based RBAC Model for Web Services

Growing numbers of users and many access policies that involve many different resource attributes in service-oriented environments cause various problems in protecting resource. This paper analyzes the relationships of resource attributes to user attributes based on access policies for Web services, and proposes a general attribute based role-based access control（GARBAC） model. The model introduces the notions of single attribute expression, composite attribute expression, and composition permission, defines a set of elements and relations among its elements and makes a set of rules, assigns roles to user by inputing user＇s attributes values. The model is a general access control model, can support more granularity resource information and rich access control policies, also can be used to wider application for services. The paper also describes how to use the GARBAC model in Web services environments.

基于改进FSM的RBAC测试集约简方法

使用完备的有限状态机生成一致性测试集虽然有效,但数量庞大。针对该问题,考虑一般系统访问控制的基本需求,提出6种探索式方法对有限状态机(FSM)进行约简,有效避免状态爆炸的现象发生,简化了生成的一致性测试集大小。对基于FSM生成树进行实验,结果表明,改进FSM对缩小基于角色的访问控制系统一致性测试集是有效的。

基于RBAC的任务优先级访问控制的研究与实现

基于角色的访问控制模型在现实中有着较为广泛的应用,然而这一模型本身存在着一个需要解决的问题:当一个用户同时激活一个或多个角色可执行的所有任务时,如何才能确定任务执行的次序,以使得有利于更紧急的任务得到优先执行。通过借鉴现有研究成果及研究思路,运用模糊综合评判法解决了这个问题。

工程项目管理系统的设计与实现

针对独立地区供电公司的生产管理模式,研制了一套地区电力企业工程项目管理系统。首先创建了整个系统的底层平台和总体架构,然后提出了基于角色的访问控制方法(RBAC),使得系统运行及信息具有良好的安全性;进一步提出并实现了基于工作流结构的具有良好灵活性和扩展性的流程模块。在此基础上,设计并开发了拥有完整功能的实用系统。实际电力公司的长期正常使用,证明了文中所设计及开发系统的正确性和有效性。

基于角色的访问控制模型在实验室教学管理系统中的应用

从实验室教学管理系统的特点出发,讨论了基于角色的访问控制模型RBAC在实验室教学管理系统中应用的优势。同时,又根据B/S结构的信息管理系统的实际情况,以“东南大学电工电子实验中心教学管理系统”为对象,建立了一种用户—角色—页面组权限模型,给出了模型E-R图和权限获取的UML图,并给出了模型应用的实际效果。

基于角色的动态分级权限控制模型

企业级WEB ERP应用系统中,对于业务管理层级分明、用户多而分散、权限难以集中管理的系统,传统的RBAC(Role-based Access Control)模型难以满足实际业务系统的需求。基于RBAC模型的基本思想,对角色概念进行了扩展和增强,提出了一种通过资源和角色的分级分层定义,权限分布式逐级控制模型,优化企业管理流程。在实现技术上,定义了人力资源管理区树结构,更加直观地体现了层次结构,简化了授权配置。