RBAC模型中静态约束机制的扩展

基于角色的访问控制引入了角色的概念，方便了权限的分配与管理，是一种安全、高效的访问控制机制，并形成了标准. 介绍了RBAC模型标准，对RBAC中的静态约束机制进行了扩展，增加了静态势约束及静态权限约束，阐述了其作用，给出了形式化定义，并扩展了标准中的系统及管理功能规范以对新的约束提供支持. 约束机制的扩展能强化RBAC的授权管理，提高RBAC系统的实用性、可靠性.

The Research of Extension of Static Constraints Mechanism in RBAC Model

Role-based access control (RBAC) introduced the concept of role to improve the assignment and management of privilege. RBAC is a secure, effective method of access control. The constraints model is an important one of the standard models of international committee for information technology standard (INCITS). After introducing the standard models of RBAC, the mechanism of static constraints is extended by introducing the static cardinality constraints and static privilege constraints. These constraints are formalized defined, and the system and administrative functional specification are extended to support the new constraints. The extended constraints will enhance the management of authority and the practicability, reliability of RBAC system.