基于RBAC的信息终端内核模型

随着3G技术、无线网络等新兴技术的发展，桌面系统、嵌入式系统用作个人或企业用户的信息终端，数据的保密性将面临更严峻的安全威胁。为提高信息终端的安全性，分析了操作系统中进程的非法操作对系统信息安全产生的威胁，将RI3AC模型应用于信息终端中操作系统内核的安全管理机制中，构建了基于RI3AC的系统进程访问控制模型，给出了具体的实现框架，并针对开源操作系统与非开源操作系统，分别给出了实施方法。

Model of Information Terminal's Kernel Based on RBAC

With the development of such technologies as 3G and wireless network, desktop systems and embedded systerns are used as individual's or enterprise user's information terminals, and confidentiality of user's data will face more serious security threats than before. ho improve the security of information terminals, this paper analyzed the threats to system's information security which comes from the abnormal operation by processes in operation systems, and applied RBAC model into the safety management mechanism of operation system's kernel. The access control model of system's process based on RI3AC was built, and an implement framework was proposed. Finally, this paper illustrated the methods of implementation of the model for open source systems and non-open source systems.