CRM中基于RBAC的改进模型的研究与设计

角色访问控制(role-based access control,RBAC)技术在信息安全领域日渐成熟,但在处理角色的势约束问题方面还有待进一步研究.为了解决这一问题,在此,提出了一种树状细粒度RBAC模型(treelike and little granularity-oriented RBAC,tgRBAC),该模型是从RBAC模型演化而来的.并进一步给出了基于J2EE架构的该模型的实现模型,对解决企业中普遍存在的垂直领导时角色具有势约束问题进行了研究.并在某集团客户关系管理系统(XJ_CRM)中进行了具体的实践.

Research and design about access control model in CRM based on RBAC

Role-based access control provides flexibility to security management over the traditional approach,an important concept "role" is presented,but RBAC is awkward when deal with the potential restriction role.A treelike and little granularity-oriented RBAC,i.e,tg-RBAC,is presented to study this item,tg-RBAC is evolved from the RBAC,and a J2EE-based organized and realized model is given,too.With their help,a series of studies about the cardinality constraint solution of role in upright leading of enterprise's man-agement are taken.Tg-RBAC is realized in system XJ_CRM of a company.Practice is proved that the model "Tg-RBAC" is effective in potential restriction of role.