【摘要】 角色工程研究基于角色的访问控制模型(RBAC)中角色的提取与优化,但在应用的场景中忽视了复杂信息系统(CIS)这一重要对象。RBAC是CIS中的重要访问控制模型,但由于现有的角色及其权限之间的关系由人工指定,导致成本较高。针对此问题,将角色工程引入至CIS中,使用概念格模型和主谓宾需求获取方法,通过数据变换,从系统的需求中直接提取分层角色及其权限关系,以降低成本。最后,通过实验验证了本方法的有效性。更多还原

【Abstract】 Role engineering focuses on the role mining and optimizing of Role-Based Access Control(RBAC),but it omits the scenario of complex information system(CIS) among those applications.The popular model for access control in CIS is RBAC,where relations between roles are assumed to have been built by humans beforehand.However,building these relations is time-consuming,even for experts.We introduced the role engineering into CIS,exploited concept lattice model and subject-predicate-object method to generate roles and their corresponding hierarchical relations from the requirement information acquired from domains,and the costing is lower.In the end,our experimental results show that our algorithm is effective.更多还原