扩展RBAC访问控制模型在家庭开放平台中的应用

基于角色的访问控制（role-based access control,RBAC）技术是目前访问控制领域研究的热点，具有灵活和高效的特点。在RBAC模型的基础上，将权限进行细化，添加了对象、操作、域和分组4个要素，提出了域的可继承性，深入地控制角色可管理的数据内容和操作，提供了更细粒度化的权限功能。将扩展后的模型作为解决家庭开放平台终端管理子系统分权分域问题的理论基础，解决了系统中访问控制约束的问题，提出了多样化的角色和权限设计方案，实现了复杂的职责分配。

Application of the Extension RBAC Model in the Family Open Platform

Role-based access control（RBAC）technology is one of the hotspots in the research of access control.It is of great flexibility and high efficiency.The permission of RBAC model was refined,and four elements such as object,action,domain and group were added to the model.The inheritance of domain was put forward.The extended model（ODG-RBAC）provided a more fine-grained access control.Through using ODG-RBAC model in the family open platform STB manage system,the problem of access control was resolved.Meanwhile,by providing diversified design scheme of permissions and roles,the complex responsibility assignment was implemented.