支持RBAC限制的XACML改进模型

访问控制是当今一种保证信息安全的重要方法。而角色访问控制技术（RBAC）也因为其自身的特点使得安全管理模式得到大大简化,从而得到更加广泛的应用。文章分析了基于XML的访问控制规范语言（XACML）的访问控制框架,并将其与RBAC限制模型中的角色限制条件相结合,设计出一种可以更好地支持RBAC限制的改进模型。该模型不仅具有良好的统一性、规范性和合理性,也能更加适应动态的网络环境。

The XACML improved model with support of RBAC limiting

Access control is one of the important methods to ensure information security. Role-based access control （RBAC） makes safety management model greatly simple for its own characteristics, thus it is more widely used. The access control framework for XML- based access control specification language （XACML） is analyzed, and it is combined with the role limiting condition of RBAC limit model, then an improved model with better support of RBAC restrictions is designed. The model not only has good uniformity, normative and rationality, but also more responsive to the dynamic network environment.