基于授权对象的角色控制模型的应用研究

权限策略在集团化企业安全需求扮演重要角色,而基于角色的访问控制（RBAC）模型是目前的研究热点.将RBAC模型优化,结合旅游集团综合信息化管理系统的要求及实际岗位情况,将权限在角色、操作等维度上进一步细化,把业务部门间的相互关系跟系统中的角色结合起来,提出了基于授权对象的角色访问控制模型（AURBAC）,从而实现旅游集团信息系统中的权限管理.

Application Research of Based on Authorization Objects Role Control Model

Permission strategy in group enterprise security demand plays an important role, role-based access control （RBAC） model is a research hotspot at present. In this paper, the optimized RBAC model, combined with the comprehensive information management system of tourism group requirements and the actual status, the permissions on the role,operation and other dimensions further refinement, the businessrelationship with the roles of the system are combined, the authorization object rolerole-based access control model based on （AURBAC） , so as to realize authority management of tourism group in information system.