论文部分内容阅读
介绍一种基于角色的访问控制模型,分析了RBAC96中的角色层次模型和私有权限问题,并指出Sandhu’s解决方案的不足.提出了一种改进的角色层次模型用于改善RBAC96,并提出一些新的概念,比如:公有权限、私有权限和继承范围.在新的角色层次模型中,上级角色从下级角色继承公有权限,但不继承私有权限.新的角色层次模型对相同的角色层次关系的描述比RBAC96更简单和易于理解,且适合应用于具有更多、更复杂的角色层次关系,比如:操作系统,DBMS,分布式应用等.
This paper introduces a role-based access control model, analyzes the role hierarchy model and private rights in RBAC96, and points out the shortcomings of Sandhu’s solution.An improved role hierarchy model is proposed to improve RBAC96 and proposes some new Concept, such as: public authority, private authority and inheritance scope.In the new role hierarchy model, the superior role inherits the public authority from the subordinate role, but does not inherit the private authority.The new role hierarchy model describes the same role hierarchy relationship RBAC96 is simpler and easier to understand, and suitable for more and more complex role hierarchies, such as operating systems, DBMSs, distributed applications, and more.