分布式环境下的一种基于角色的访问控制模型

为将角色访问控制RBAC应用于分布式环境，本文研究了传统RBAC角色组织结构，在倒转树型角色组织结构的基础上引入域的概念，将分布式系统中各机构封装成域.进而针对分布式系统的特殊性提出原始域和构造域概念，扩展了权限的概念，然后分别提出了域内和域间的访问控制策略.从而实现了RBAC的分散化和分布式管理.

A role base-access control model in distributed environment

In order to apply the role-based access control into distributed environment, this article did a lot of research on the role architecture of the traditional RBAC, introduced the concept of domain on the basis of the inverted tree architecture, encapsulated each part of the distributed system into domains, and put forward the concepts of origin-domain and constructed-domain according to the particularity of the distributed system, expended the concept of Permission at the same time, then bring forward two different policies separately for the access control in one domain and inter-domains access control, consequently, realized the disperse and distributed organization of RBAC.