摘要
本文讨论了基于角色的访问控制的基本原理,在基本PMI模型的基础上,建立了基于角色的特权模型。在此基础上,建立一个在公钥密码系统下的企业级RBAC模型。该系统结构清晰,实现简单,不需要对被保护的应用服务器做任何的修改,极大地简化了企业网络服务中的权限管理,并能够保证企业安全策略的贯彻和实施。
The principle of RBAC is discussed. Based on the basic PMI model, the privilege model based on attribute is established. Then, the RBAC model in public key system is established. The model has a clear structure and can be realized easily without any modification on the secured application server. Therefore, the privilege management in net service can be simplified while the security strategy of enterprise can be implemented.
出处
《农业网络信息》
2007年第5期63-65,共3页
Agriculture Network Information
关键词
访问控制
公钥密码
角色
Access control
Public key
Attribute
