一种基于角色PMI的访问控制安全模型

访问控制一直是信息安全的重要保证之一。它包括三种主要的策略，即自主访问控制、强制访问控制和基于角色的访问控制。文中介绍了以上三种访问控制策略以及角色指派属性证书和角色规范属性证书，以此为基础讨论了基于角色的PMI体系结构，然后探讨了基于角色PMI的访问控制安全模型。该模型具有灵活、方便、占用较少存储空间以及减少了网络通信的开销等优点，目前正将该模型使用到大型网络信息管理系统中，实现系统的访问控制。

The Role-based PMI Secure Model for Access Control

The access control is always one of the important guarantees of information security. It includes three main strategies, namely, discretionary access controls (DAC), mandatory access controls (MAC) and role-based access controls (RBAC). Here introduces three main security strategies and the role specification AC and role assignment AC, and discusses the role-based PMI architecture, and discusses and researches the role-based PMI secure model for access control. The model has advantages of flexibility, convenience, less storage space and less network consumption,etc. At present,the model in the net management information system is been going to be used to realize access control for system.