【摘要】 基于角色的访问控制具有管理简单、安全灵活、可用性强等特点,近年来得到了广泛的研究与发展.但是对于角色的管理方法还存在一些不足.针对现有的角色管理方法中关键角色可被赋予多个用户可能导致冲突以及缺乏角色移交机制的问题,设计并实现了一种灵活的关键角色管理方法KRMM,把角色划分为关键角色与非关键角色,限制关联关键角色的用户数量,确保关键权限不被滥用,同时支持关键角色的移交,使用户能够将自己关联的关键角色移交给其他用户,确保系统任何时候都不会缺少关键角色.在麒麟安全操作系统中实现了KRMM,使角色的管理更加灵活与安全.更多还原

【Abstract】 Over the past few years, RBAC(role-based access control) has drawn significant attention and seen great improvement due to its simplicity in management, security, flexibility and strong usability. But the role management in existing RBAC systems is in need of further study. Aiming at the problem that may be caused by different users that are assigned the same key role and lack of role transferring mechanism, this article addresses a flexible key role management method(KRMM). By dividing roles into key roles and non-key roles, and limiting the number of users that are associated to key roles, KRMM can assure that key privileges will not be abused. KRMM also supports the transferring of key roles, making users able to transfer a key role that is assigned to him to other users. This insures that key role will not be lost. KRMM is implemented in Kylin Operating System and improves its flexibility and security.更多还原