关键词: 访问控制, 可信协同, 交互义务, 组织建模

Abstract: RBAC（Role Based Access Control） is a widely accepted model suitable for access control of organizational information system.However there is still a gap need to be filled whenever considering practical application of RBAC in development of trustable organizational system，especially in combination of organizational business collaborative model with RBAC.Based on RBAC model，elements of obligation and reward/sanction in business collaborative model are proposed to extend RBAC to a new model called RBAO（Role Based Access and Obligation）.RBAO specifies not only the authorizations of roles in an organization，but also their obligations and associated sanctions or rewards in collaborative business.RBAO is more applicable in trustable business collaborative system development comparing with RBAC.The analysis and modeling process of using RBAO in trustable collaborative business system development is illustrated through a case study.

Key words: access control, trustable collaboration, interactive obligation, organization modeling