RBAC模型权限管理中三种新的角色继承机制和授权策略

信息系统的权限管理对于系统安全是非常重要的.该研究的主要贡献包括：(a)对角色与权限的关系进行了分析；(b)对权限进行了分类；(c)提出的三种角色继承机制将RBAC模型角色数量减少了将近一半，使权限管理更具灵活性、可扩展性、安全性和实用性；(d)新的理论在实践中得到了应用.实践结果表明，新的模型提供了灵活的授权管理和访问控制服务，并简化了权限的管理.

Three new role-inherited mechanisms and warrant strategies in permission management of RBAC model

The permission management of information system is very important for the system security.The main contribution of this study include(a) Analysing the relationship on roles-permission.(b) Classifying the permission into different categories.(c) Proposing three role-inherited mechanisms,it reduces the number of roles in the RBAC model by 50% and makes the permission management more flexible,extendable,safe and practical.(d) Applying the new method in practice.The practice shows that the new model provides flexible warranty management and access control services and simplifies permission management.