基于多维角色的访问控制模型

针对RBAC应用系统中角色具有多层语义的特点,提出了多维角色访问控制模型.模型中角色用多维角色分量表示,给出了在角色分量上定义角色层次、角色限制和角色权限指派关系的方法,使角色的语义清晰,简化了模型的角色管理和角色的权限分配.

Multi-Dimensional Role-Based Access Control Models

Because the roles typically have the characteristics of multi-layer semantic in application RBAC real system,this article presented a family of models of Multi-Dimensional Role-Based Access Control(MDRBAC).In the model,the role is represented with multiple role segment sets and definitions of role hierarchy,role constraint and role permission assignment are given on the role segment.Therefore,this makes clear the role semantics and simplifies the role management and role permission assignment in the model.