基于授权矩阵的RAC模型的应用研究.doc

文档介绍：基于授权矩阵的RBAC模型的应用研究
朱峰1,刘万军2
(,辽宁葫芦岛 125105;2. 辽宁工程技术大学软件学院,辽宁葫芦岛 125105)
摘要:同传统访问控制模型相比,基于角色的访问控制(RBAC)模型在灵活性和控制粒度上的一个重大进步。美国国家技术与标准局提出了RBAC建议标准,更加促进了对RBAC研究的广泛关注。然而,该标准提出的模型的适用的领域还存在着一定局限和不足。本文提出了一个经过改进的RBAC模型——RBACL,融合访问控制矩阵(ACL)和RBAC的优点,使模型的适用范围更加广泛和灵活。同时还提出了动态的用户组的概念,使授权过程更加灵活。最后,本文详细阐述了该模型在统一授权控制中的实现。
关键词:角色;用户组;访问控制矩阵;授权
中图法分类号: TP311 文献标识码: A
Based on the authorization of the matrix model of RBAC Applied Research
ZHU Feng1, LIU Wang Jun2
( of Electronic and Information Engineering , Liaoning Technology University, Huludao Liaoning 125105, China; of Software, Liaoning Technology University, Huludao Liaoning 125105, China)
Abstract: With the traditional model of access control, role-based access control (RBAC) model in the size of flexibility and control a significant advance. The National Bureau of Standards and Technology put forward a proposed RBAC standard, and promote more research on RBAC attention. However, the standard model proposed by the application of the field there are certain limitations and ings. In this paper, an improved RBAC model - RBACL, integration of access control List (ACL) and the advantages of RBAC, so that the scope of application of the model more flexible and broad. At the same time, also raised the concept of dynamic user groups, empowered to make the process more flexible. Finally, this article