| 基于规则的RBAC在Web信息系统中的实现 |
| |
| 引用本文： | 李岳璘,方勇,邓远林,陈其杉,石稀林.基于规则的RBAC在Web信息系统中的实现[J].四川大学学报(自然科学版),2006,43(6):1274-1278. |
| |
| 作者姓名： | 李岳璘 方勇 邓远林 陈其杉 石稀林 |
| |
| 作者单位： | 四川大学电子信息学院,成都,610064 |
| |
| 摘 要： | 针对Web资源访问的特点和安全问题,研究了传统的RBAC(Role-Based Access Con-trol)模型的缺陷,提出了一种适合大型Web资源访问系统的RBAC扩展模型,即利用用户属性制定相应的规则,根据规则为用户分配角色,以获得相应Web资源的访问权限.该扩展模型弥补了传统RBAC基于静态角色分配的不足,实现了角色的动态分配,并对规则和角色分配进行了约束,提高了Web资源访问的效率和安全性
|
| 关 键 词： | 角色 规则 访问控制 |
| 文章编号： | 0490-6756（2006）06-1274-05 |
| 收稿时间： | 2005-03-27 |
| 修稿时间： | 2005-03-27 |
Implementing Rule-Based RBAC in Web Information System |
| |
| LI Yue-lin,FANG Yong,DENG Yuan-lin,CHEN Qi-shan,SHI Xi-lin.Implementing Rule-Based RBAC in Web Information System[J].Journal of Sichuan University (Natural Science Edition),2006,43(6):1274-1278. |
| |
| Authors: | LI Yue-lin FANG Yong DENG Yuan-lin CHEN Qi-shan SHI Xi-lin |
| |
| Institution: | College of Electric Information; Sichuang University,College of Electric Information; Sichuang University,College of Electric Information; Sichuang University,College of Electric Information; Sichuang University,College of Electric Information; Sichuang University |
| |
| Abstract: | Aiming at characteristics and safe problems of the Web resources access,studies in the deficiency of the traditional RBAC(the Role-Based Access Control) model,puts forward a kind of RBAC patulous model which is fit for the large system of Web resources access.Namely it establishes rules with the users' attributes,assigning the role for the customer according to the rule.That model makes up for the shortage of the traditional RBAC with static role-assignment,implements the dynamic allotment of the role,and m |
| |
| Keywords: | RBAC rule access control |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《四川大学学报(自然科学版)》浏览原始摘要信息 |
| 点击此处可从《四川大学学报(自然科学版)》下载免费的PDF全文 |
|
