Computer Engineering and Applications ›› 2014, Vol. 50 ›› Issue (10): 108-115.

Previous Articles     Next Articles

RBAC framework supporting poset and sync & async permission modeling

LIU Pengyuan1,2, SUN Baolin1   

  1. 1.School of Information Management of Hubei University of Economics, Wuhan 430205, China
    2.School of Computer Science & Technology, HUST,Wuhan 430074, China
  • Online:2014-05-15 Published:2014-05-14

支持偏序和同异步权限建模角色访问控制框架

刘鹏远1,2,孙宝林1   

  1. 1.湖北经济学院 信息管理学院,武汉 430205
    2.华中科技大学 计算机科学与技术学院,武汉 430074

Abstract: RBAC(Role Based Access Control)makes the system easier to use and improve robustness. Study model RBAC and list its defects in fine grain and expression ability. With UML modeling, refactored RBAC96, propose an expendable object oriented RBAC model(OORBAC) with ability to tiny fine-grained access and supporting permission poset. Based on OORBAC combined with some GoF patterns, design a common framework superior in synchronous/ asynchronous and poset permission relation’s expression, and supporting dynamic access control on fine granularity more efficiently.

Key words: Role Based Access Control(RBAC), fine-grained, synchronous permission, asynchronous permission, poset, GoF

摘要: 角色访问控制(Role Based Access Control,RBAC)的应用提高了系统易用性和健壮性。分析了RBAC标准模型,指出其在细粒度和表达能力等方面的一些缺陷,结合UML对其重构,提出支持偏序权限建模的面向对象角色访问控制模型(Object Oriented Role Based Access Control,OORBAC),基于该模型结合部分GoF模式设计了通用应用框架。与其他应用框架相比有着良好的通用性,支持权限关系的同异步及偏序关系表达,并在细粒度动态访问控制上具有更好的效率。

关键词: 角色访问控制, 细粒度, 同步权限, 异步权限, 偏序, 设计模式