文档介绍：关键词:单点登录;基于角色访问控制模型;II强Ac2000;角色关联;c-衄Ac; Shibbole也 RESEARCH ON ACCES S CONTRoL MODEL ABSTRACT 111eadVentoftlleiIlfomation ageh弱broughtdbout鲈at Ch锄ges i11t0珊F0mlation shariIlg iIl as证gIe domaillh笛been啪able t0meet lIserS’dem锄ds. nerefore,访解domaill∞cess、懈bom罄嘲uired. SingleSi髓-On(SSO) is a speci甜ized foml ofso凡Vare曩咄emication nlatenables au∞rt0锄lmenticateonce锄d ess t0me resources ofmultiple somⅣ some仃。oubles byit、)Ir:hen廿ley acCess resourCes illter-doma旭叭ch勰multiple logins鹊well勰multiple 龇I舳吼ts is anewgene谢on ofSSo irIlplementations wllich pr0、ridesuserS诵nlseCure锄d reliableidenti够鲫tllentic撕on mccllaIlism. AcCess controlis锄impo衄lt t|ecllIlology t0pr叭eCtthe∞c研妙of illfomlation re∞urces,锄d也ei刀栅-domaill access lli曲cr reqllire釉铋t f-0r∞cess contr01. IRBAC2000 w弱proposcd b鹤edon廿lecl邪sicalImAC ’s apolicy触mework matfkilita:ces也e鸵cure证teroⅨImbili够between似o wofI【SbydefiIling a setof鹤sociatio胚be佣,a∞tlle localandforei印mle 11ie豫rcmes,S0 tllatme RBAC modelis extended t0mmti—dom血enVir0咖ent’and洫pr0Ves t:heSeCuri哆 ofiIlteHlomaill ,we咖dy tllebasicideaofIImAC2000,锄d觚alyzc me e虹sting Shonlages ttlem咖wofks ofmis paper a聆deSCribed勰 follows: Firstly'tbjspaper髓a1),zes tlleprirnaDr cau∞s t11atled t0mleconniCt勰sOciation锄d Violati∞of StaticS印磁晒on ∞les’llie献11ical陀l“on幽ps are鲫lalyzed嬲well,∞cordiIlg t0me roles’Ke玎arCllic甜,a sequence metllod锄d p撕Son method ofroleKe仡rclljcalrelationshjps,aq伍ckex句瞅ion metllodof∞le mappiIlg set “s b嬲is,缸inter-domaill connict鼬sociationglobal detectionalgo—mm粕d觚iIlte卜dom血Stadc mutex rolesglobd d鳓ectionalgoritllm a糟 proposed. SeCondly’thjs paper propo∞s amodeln锄ed Cen仃alized RoleAs∞ciation Access (C-Ⅱ强AC),iIl ordcrt0∞lve tlleproblems证舳AC2000 model addition t0t11eapplication tionaJgoriⅡlIIls mentioned a:boVe,tllis model de丘nes pfiVate roleset锄d pfiVa