基于RBAC的两级访问控制模型

基于网络的大规模软件应用系统面临着日益复杂的数据资源安全管理的难题,基于角色的访问控制方法(Role Based Access Control,简称RBAC),实现用户与访问权限的逻辑分离和构造角色之间的层次关系,从而方便了数据的安全管理。基于角色的访问控制的基础,对角色进行进一步划分,分为模块级角色和数据级角色。一个模块级角色包含至少一个或者多个数据级角色。以角色间包含关系取代RBAC中角色之间的继承关系,有效的防止了角色间继承带来的冗余隐患。

A Two Level of Access Control Model Based on RBAC

Large-scale web based on software application systems face increasingly complex challenges of data resources security management, role-based access control (Role Based Access Control, called RABC) method achieves logical separation of user and access authority, and constructs relationships between structural roles, thus facilitating data security management. This thesis divide the role into module-level role and data-level role based on the model of the role-based access control (RBAC). Module-level roles m...