摘要
传统基于角色的访问控制(RBAC)不能很好地解决多方访问控制下信任等级的细粒度区分.本文对多种角色访问控制模型及属性特征进行了研究,提出基于属性策略的RBAC模型,对模型进行了形式化定义.在基于属性策略的RBAC模型中,扩展了RBAC中角色的概念,对角色的属性进行了定义并提供基于属性策略的验证方式,进而给出了多方精确访问控制的实现,提高了访问控制的灵活性和对数据对象粒度控制的精确性.在云计算平台上,设计并实现了SaaS模式下的细粒度对象管理服务,实验验证了该模型对动态权限变化的适应能力及多方访问的权限控制能力.
Fine-grained trust level distinction in multi-access control is not well resolved in traditional role-based access control （RBAC） model. In this paper, a variety of role-based access control models and attribute characteristics are deeply researched, and an attribute-policy-based RBAC model is proposed, then defined formally. Attribute-policy-based RBAC model extends the concept of RBAC roles, defines properties for roles and provides an attribute-policy-based authentication. The model gives the realization of precise and flexibility multi-access control and improves access control accuracy for fine-grained data objects. In cloud computing platform, a SaaS model of fine-grained object management services is designed and implemented. Experiment shows that the model is adaptive to changes in the dynamic permissions and has ability to control multi-access control.
出处
《小型微型计算机系统》
CSCD
北大核心
2013年第2期328-331,共4页
Journal of Chinese Computer Systems
基金
国家自然科学基金委员会与中国民用航空局联合资助项目(60979011)资助
