RBAC模型的改进及其在电力ERP权限管理中的应用

基于角色的访问控制(RBAC)是目前研究得最多、思想最成熟的一种面向企业安全需求的访问控制策略。文中在核心RBAC基本模型的基础上,将角色集和权限集进行细分。细分后的核心RBAC在权限设置上更加细致,每一级管理员可以按照实际需要,对角色的功能、权限从数据周期、数据对象、数据类别、操作功能、操作级别5个维度上进行明细设置,并灵活、深入地控制角色的功能及其访问的数据内容,从而达到精确管理的目的。将细粒度化的RBAC模型应用于供电企业资源计划(ERP)系统的权限管理模块的开发中,并取得了良好的应用效果。

Improvement of RBAC Model and Its Application in the Competence Management of Electricity ERP

The role-based access control(RBAC) is an extensively researched demand-oriented enterprise security access control strategy with the most mature thinking.On the basis of core-RBAC model,roles set and permissions set are fractionized.The fractionized core-RBAC model is finer in permissions setting.In accordance with the actual needs of administrators,each one can definitely set the functions and permissions of role in the five dimensions,i.e.data cycle,data object,data sort,operation function,operation level,and deep and flexibly control the functions of role and the visited data content to achieve accurate management.Moreover,the refinement RBAC model is used in the development of competence management module of the power supply ERP system,and a good application effect is achieved.