【摘要】 同传统的自由访问控制(DAC)和强制访问控制(MAC)相比,基于角色的访问控制(RBAC)代表了在灵活性和控制粒度上的一个重大进步.为了促进RBAC的研究和应用,美国国家技术与标准局提出了RBAC建议标准.然而,该标准仅支持一种约束,即职责分离约束.提出了一个经过扩展的RBAC标准——e-RBAC,增加了对广泛使用的势约束的直接支持.提出了一个面向对象的RBAC系统实现框架,该框架可部分起到API标准的作用.在此框架之下实现了一个通用的RBAC核心功能模块act-RBAC.更多还原

【Abstract】 Role-based access control (RBAC) represents an important advancement in flexibility and granularity of control from the classical discretionary and mandatory access control. To accelerate the research and application of RBAC, NIST in USA has proposed a standard for it. But the standard supports only one constraint type, namely separation of duty. An extended RBAC standard that directly supports the widely used cardinality constraint, e-RBAC, is proposed. An object-oriented implementation framework for RBAC system is proposed and can be used as an API standard. A general core functional module for RBAC systems is implemented with respect to the proposed framework.更多还原