基于角色访问控制技术的UML表示

基于角色的访问控制（ＲＢＡＣ）技术随着网络的迅速发展而发展，在ＲＢＡＣ中，角色是重要概念，它根据用户在组织内所处的角色进行访问授权与控制，通过角色沟通主体与客体。该文提出了用可视化标准建模语言ＵＭＬ的类图、用例图和交互图（合作图、顺序图）来描述了 ＲＢＡＣ的相关概念。有效地帮助系统开发人员理解ＲＢＡＣ模型和建立基于角色的系统。

UML Representation of RBAC Technology

The control to access resources in organization has become increasingly important, and Role Based Access control (RBAC)technology is rapidly developing along with the internet. In RBAC,The Role is a important concept,and must be properly constructed to reflect organizational access control policy and needs. In this paper we represent a RBAC model with this well-known modeling language UML to reduce a gap between security models and system developments. We specify the RBAC model with three views:static view,functional view,and dynamic view. Several frameworks for the development of role-based systems have been introduced. However,there are a few works specifying RBAC in a way which system developers can easily understand and refer to develop role-based systems.