基于RBAC模型的安全访问机制建模研究

基于角色访问控制（RBAC）是一种方便、安全、高效的访问控制机制。介绍了软件系统安全控制策略，分析了RBAC的基本思想和用户角色分配的基本方法，提出了基于面向对象的RBAC建模思想，并用标准建模语言UML的交互图描述RBAC的授权流程，从而使系统开发人员有效理解RBAC模型并建立基于角色的系统。文中还给出了在数据备份系统中运用RBAC实现用户权限管理应用模型的实例。

MODELING RESEARCH OF SECURITY ACCESS MECHANISM BASED ON RBAC MODEL

Role-Based Access Control(RBAC) is a kind of access control mechanism which is convenient,secure and high performance.This paper introduces the security control policy of software system,analyses the fundamental principle of RBAC,and the fundamental methods of allotting the user roles.The paper proposes a RBAC modeling idea based object oriented,describes the authorization process with interactive diagram of the well-known modeling language UML.In this way,it makes system developers understand RBAC model and build system based role.At last the article gives one example on application model which implements user authorization management based RBAC in data backup system.