基于任务-操作的访问控制模型研究

访问控制是目前解决信息系统安全问题的主要技术。针对传统的基于任务-角色的访问控制策略在系统的安全性、通用性和实用性方面的不足,提出了一种新的基于任务-操作的访问控制模型(T-OBAC),该模型结合了基于任务和基于操作访问控制模型的共同优点,且角色描述更精确、安全性更好、应用更便捷、灵活。对它的基本原理、特点、实施步骤和实现方法等进行了深入研究,并通过一个实际系统开发的例子展示了模型应用的可行性和有效性。

ON TASK-OPERATION BASED ACCESS CONTROL MODEL

Access control is a main technique to cope with the security problems in information systems.Traditional task-role based access control policy is difficult to satisfy the requirements in security,versatility and practicality.To address that issue a new access control model based on task and operation,called as Task-Operation model(T-OBAC),was introduced.The model combines the advantages of task-based model and accessing operation-based model together with more precise depiction of role,and is better in safe...