| P-RBAC:一种门户环境下的访问控制模型 |
| |
| 引用本文： | 蒋友毅,宋靖宇,钟华.P-RBAC:一种门户环境下的访问控制模型[J].计算机工程与应用,2007,43(12):119-123. |
| |
| 作者姓名： | 蒋友毅 宋靖宇 钟华 |
| |
| 作者单位： | [1]中国科学院软件研究所软件工程技术研究开发中心,北京100080 [2]中国科学院研究生院信息科学与工程学院,北京100080 |
| |
| 基金项目： | 国家自然科学基金
,
国家重点基础研究发展计划(973计划) |
| |
| 摘 要： | 门户能够有效地实现异构信息之间的集成与协作,并为用户提供可定制、统一且遵循规范的访问服务。然而,由于门户所具有的这些不同于普通Web应用的特性,也使得传统访问控制模型无法在门户中直接使用。提出了一种面向门户系统的访问控制模型P-RBAC。P-RBAC扩展了传统的基于角色访问控制模型,并根据行为状态进一步分为静态模型和动态模型。P-RBAC给出了静态模型和动态模型上的行为规则,提出了具体的动态权限指派和角色组织策略,从而有效地解决了门户的访问控制问题。实际的应用案例证明,P-RBAC模型能够适用于门户的访问控制,并较之传统访问控制模型更高效可行。
|
| 关 键 词： | 门户 RBAC 访问控制 P-RBAC |
| 文章编号： | 1002-8331（2007）12-0119-05 |
| 修稿时间： | 2006-12 |
P-RBAC: access control model in portal systems |
| |
| JIANG You-yi,SONG Jing-yu,ZHONG Hua.P-RBAC: access control model in portal systems[J].Computer Engineering and Applications,2007,43(12):119-123. |
| |
| Authors: | JIANG You-yi SONG Jing-yu ZHONG Hua |
| |
| Affiliation: | 1.Technology Center of Software Engineering,Institute of Software,Chinese Academy of Sciences, Beijing 100080,China; 2.School of Information Science and Engineering,Graduate School of the Chinese Academy of Sciences,Beijing 100080,China |
| |
| Abstract: | Portals facilitate users to easily access information by integrating heterogeneous applications,services and data resources in a consistent way However,traditional access control models are not applicable to portal systems because of portal systems' particularities shown above.This paper proposes an improved access control model for portal systems:P-RBAC.The model is based on RBAC by extending it both on concepts and on behaviors.The static and dynamic models of P-RBAC are described,and then a detailed discussion of the rules and policies on both models is given.The application of P-RBAC in real environment proves that it can be a possible and efficient solution for the access control in portal systems. |
| |
| Keywords: | portal RBAC access control P-RBAC |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
