摘要
经过多年的发展,RBAC模型理论研究已十分成熟,并广泛成功应用于信息系统访问控制。本文阐述了RBAC模型安全控制的思想及原理,它通过抽象用户、角色、目标、操作、许可权5个基本数据元素并建立它们之间的联系构建网络状的权限控制模型;分析了RBAC模型在处理具有时间约束的访问控制时的不足,不能充分考虑时态系统中基于时间约束的授权和访问控制;回顾了时态RBAC模型的研究现状,讨论了时态RBAC模型在时态系统授权中存在的问题,它只在角色层次进行了简单约束,而对授权和角色指派等过程中的细节考虑不够;展望了GTRBAC模型的思想并进行了讨论,GTRBAC不仅在时态RBAC的基础上考虑了持续约束、周期约束和其他特定形式的激活约束,而且提出了约束冲突的解决办法,是目前在时态环境下定义比较完全和细致的访问控制模型。
After the development of so many years, RBAC has cumulated abundant and mature theory basis and is widely used in access control in information system. In this paper, the access control thinking and principle of RBAC model are illustrated first. It consructs network security control model by abstracting five basic data objects which are user, role, object, operation and permission respectively in building the relationship among them. Then the disadvantages of RBAC in processing time-constraint access control are analysed. Secondly, we retrospect the studying status quo of temporal RBAC model and analyse the existing problem of TRBAC during authorizing in temporal system. It constraints the permission only in role level and does not consider fully the details during authorizing and role assignmeng. Finally,a model named GTRBAC and its thinking are prospected. GTRBAC is a well defined access control model in temporal environment by now. It not only considers persistent constraints, circular contraints and other particular activate contraints on the basis of RBAC, but also proposes the methods solving conflicts amongs contraints.
出处
《重庆师范大学学报（自然科学版）》
CAS
2009年第3期69-71,共3页
Journal of Chongqing Normal University:Natural Science
基金
重庆市自然科学基金计划项目(No.CSTC
2008BB0260)
