| 细粒度的基于角色的访问控制模型 |
| |
| 引用本文： | 廖俊国,洪 帆,肖海军,张昭理.细粒度的基于角色的访问控制模型[J].计算机工程与应用,2007,43(34):138-140. |
| |
| 作者姓名： | 廖俊国 洪 帆 肖海军 张昭理 |
| |
| 作者单位： | [1]华中科技大学计算机科学与技术学院,武汉430074 [2]湖南科技大学计算机科学与工程学院,湖南湘潭411201 |
| |
| 摘 要： | RBAC模型是一种被广泛应用的访问控制模型。但是,RBAC模型是在角色级管理和控制权限,不能满足用户获得角色的部分权限和角色权限的部分继承等安全需求。针对这个问题,在RBAC模型中增加权限的重要程度要素,提出了FGRBAC模型(Fine-Grained Role-Based Access Control Model--细粒度的基于角色的访问控制模型),并给出了在FGRBAC模型中求用户权限和角色权限的算法。FGRBAC模型不仅可以使用户获得角色的部分权限、父角色可以继承子角色的部分权限,而且RBAC模型可被看成是FGRBAC模型的一种特例。因此,FGRBAC模型不仅具有RBAC模型的所有优点,而且比RBAC模型具有更好的灵活性和实用性。
|
| 关 键 词： | RBAC FGRBAC 权限的重要程度 |
| 文章编号： | 1002-8331(2007)34-0138-03 |
| 修稿时间： | 2007年4月1日 |
Fine-grained role-based access control model |
| |
| LIAO Jun-guo,HONG Fan,XIAO Hai-jun,ZHANG Zhao-li.Fine-grained role-based access control model[J].Computer Engineering and Applications,2007,43(34):138-140. |
| |
| Authors: | LIAO Jun-guo HONG Fan XIAO Hai-jun ZHANG Zhao-li |
| |
| Affiliation: | 1.College of Computer Science &; Technology，Huazhong University of Science &; Technology，Wuhan 430074，China 2.School of Computer Science &; Engineering，Hunan University of Science &; Technology，Xiangtan，Hunan 411201，China |
| |
| Abstract: | RBAC model is an access control model which is widely used.However,in RBAC model,privileges are administrated and controlled on role level.A user can not obtain part privileges of a role,and a role can not inherit part privileges of another role.To address the issue,by adding an element called as importance level of privilege in RBAC model,a fine-grained role-based access control model is presented,which is denoted as FGRBAC.The algorithm for solving the set of privileges belonged to a user or a role is discussed.In FGRBAC model,a user can obtain part privileges of a role,and a role can inherit part privileges of another role.RBAC model can be treated as a special case of FGRBAC model.So,the advantages of RBAC model are available in FGRBAC model,FGRBAC model is more flexible and practical than RBAC model. |
| |
| Keywords: | RBAC FGRBAC importance level of privilege |
| 本文献已被 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与应用》浏览原始摘要信息 |
|
点击此处可从《计算机工程与应用》下载全文 |
|
