改进的RBAC模型在电网视频监控平台中的应用

针对传统基于角色的访问控制（RBAC）模型在大规模企业应用及复杂业务权限控制中的不足,本文引入了RULES和GROUPS属性对其进行延伸和拓展,形成了改进的RBAC模型。通过RULES对数据范围细化,解决了细粒度复杂业务中的权限控制,通过GROUPS定义层次结构模型,实现了大规模授权中的分级管理。基于此模型构建了统一视频监控平台权限管理框架,讨论了其功能组成、分级管理授权过程及细粒度权限控制过程,通过项目验证了其可行性与有效性。

Application of Improved RBAC Model in Grid Video Monitoring Platform

To address the drawbacks of traditional RBAC model when it is used in large- scale enterprise application and complex business access control,introduce attributes of RULES and GROUPS to extend and expand,forming the advanced RBAC（ Role- Based Access Control） model. RULES can be leveraged to access control of fine- grained complex business by fining the data scope. And GROUPS can be applied to realize the large- scale hierarchical authorization management by defining the hierarchical structure model.The access management structure of SG- UVP is built based on the proposed model. Discuss the function construction,the processes of hierarchical authorization management and access control of the proposed model. The test results demonstrate the feasibility and effectiveness of the proposed method.