利用规则RBAC模型实现门户的安全访问控制

基于角色的访问控制(Role—Based Access Control，RBAC)是一种安全、高效的访问控制机制，并不能满足门户中根据用户特征的动态改变而动态地改变用户角色的需要。结合RBAC模型思想和门户的需要提出一个基于规则的RBAC模型，在用户和角色之间增加规则，并通过定义规则表达式实现了动态的用户角色分配，克服了标准的基于角色访问控制模型应用于门户的缺陷。讨论了以规则RBAC模型为基础的门户中资源访问控制的实现，有效地解决了门户中的安全访问控制问题。

Implementing ruled-role-based access control model in portal

Role-based access control (RBAC) is a kind of access control mechanism which is secure and high efficient. The RBAC model is not satisfid with requirement of portal, which can change user's roles with changing of user's property. The ruled-RBAC model is proposed combined with thinking of RBAC model and requirement of portal, which adds rule mechanism between users and roles. The mechanism realizes the role authorization dynamically by defining rule-formula and improves the performance of standand role-based access controlmodel in portal. The implementationof resource access control in portal on the basis of theruled-RBAC modelis discussed. And the question of secure access control in portal is resolved effectively.