用角色模型实现传统访问控制

针对传统访问控制模型存在使用不方便等缺陷,采用RBAC(Role-Based Access Control)模型对其进行了改造,在不改变其原有安全标记的基础上,用RBAC模型实现了传统的访问控制,并给出了理论证明.结果表明,该方法既保证了传统访问控制模型在信息流控制方面的优点,又具有RBAC模型容易管理和灵活配置的特点,用角色模型可以完全取代传统的访问控制模型,这是安全模型发展的必然趋势.

Use Role Model to Realize Traditional Access Control

Traditional access-control models is not convenient to use, we adopt role-based access-control model to rebuild them. Based on unchanging the security label of the traditional access-control systems, this thesis uses role-based access-control model realized traditional access-control models, and proves it in theory. As a result, this method ensures the merit of information flow control of traditional access-control models, and has the characteristics of easy to management and flexible to configure of role-based access-control model, and then we can use role-based model to replace traditional access-control models completely, this is the certain direction of security models will develop.