多域多应用环境下的访问控制研究

为适应多域多应用环境下的安全互操作的需求，本文通过扩展RBAC96模型有关概念。增加其对多域环境下多应用的刻画，通过引入全局角色、域角色和关联角色概念，提出了一种多域多应用访问控制模型DPM。通过对PMI授权管理构架进行扩展，实现了DPM模型，为多域多应用环境下的安全互联提出了一个实际的解决方案。

Research on Access Control in Multi-domain & Multi-application Environment

According to the security requirements in multi-domain & multi-application environment,an access control model called DPM (Distributed Privilege Model)is presented by adding application aspect into RBAC96 model and in- troducing global role,domain role and correlation role concept.Through extending PMI(Privilege Management Infra- structure),DPM model is realized.In conclusion,it proposes a practical scheme for the authorization and privilege management in multi-application and multi-domain context.