扩展访问控制模型BSRBAC的研究

针对RBAC96模型实际应用中权限控制的不足,提出了一种基于部门和业务权限的控制模型BSRBAC.引入权限特征值概念,通过权限特征值实现公有、私有、部门和业务权限的划分.引入角色间多重继承及继承时权限重载的概念,解决多重继承时角色权限交叉、权限无限大及权限冲突的问题,实现角色权限的动态获取,解决了继承中部门权限与业务权限相互交叉的问题.

Extensible Access Control Model BSRBAC Research

RBAC96 model for the practical application of the deficiencies in access control, presents a sector-based access control model and business BSRBAC, the introduction of the concept of authority characteristic value, through the realization of rights characteristic value public, private, sector and operational authority to the division, the introduction of the role of inter - multiple inheritance, overloading and inheritance rights when the concept to address the role of multiple inheritance rights when the cross, powers and limits of infinite problems of conflict of competence to achieve a dynamic role in the acquisition, to solve the inheritance rights and business rights in the sectoral cross-cutting issues.