摘要
阐述现有基于角色的安全控制中的不足 ,通过分析角色间约束产生的根源 ,提出通过建立权限约束关系来支持角色之间的约束管理和实现访问控制 .文中定义了权限约束支持的基于角色的约束访问控制模型及增强权限模型 ,并介绍这个约束访问控制模型在ZD PDM中的应用 .实践表明 ,这种访问控制模型除了增强系统安全访问之外 ,还可以提供一种更灵活的授权机制 ,并降低安全管理员的工作复杂性 .
Since current research on role based access control manifests some deficiency, it argues building constraints among permissions and analyzing source of constraints among roles to support constrained management among roles and implement access control. The role based constrained access control (RBCAC) model supported by constraints among permissions and the enhanced permission model are introduced. Finally, its application in ZD PDM is illustrated. The fulfillment indicates the RBCAC model can not only enhance the system security, but also provide a more agile authorization to simplify the task complexity of security official (SO).
出处
《计算机辅助设计与图形学学报》
EI
CSCD
北大核心
2002年第4期333-338,共6页
Journal of Computer-Aided Design & Computer Graphics
基金
国家"八六三"高技术研究发展计划 ( 2 0 0 1AA415 2 2 0 )
关键词
约束访问控制
角色
权限约束
产品数据管理
计算机
constrained access control, role based access control (RBAC), access right constraint, PDM
