【摘要】 针对基于角色的访问控制系统不能实现动态授权、细粒度授权的问题，将属性与RBAC(Role Based Access Control)相结合，提出基于属性和RBAC的访问控制模型.在此访问控制模型上设计了基于最小扰动的角色挖掘算法，通过属性授权规则完成角色权限细粒度分配和用户角色动态分配，使产生的角色结果与原系统的角色集合保持一致.为验证算法的准确率和有效性在不同数据集下进行实验评估，实验结果表明，算法产生角色的准确率和有效性有明显的提高.更多还原

【Abstract】 To solve the problem that role-based access control system can not realize dynamic authorization and fine-grained authorization, this paper combines attributes with RBAC(Role Based Access Control)to propose an access control model based on attributes and RBAC.The role mining algorithm based on minimum disturbance is designed on this access control model.The fine-grained assignment of role permissions and the dynamic assignment of user roles are completed by attribute authorization rules.The resulting role results are consistent with the role set of the original system.In order to verify the accuracy and effectiveness of the algorithm, the experimental results show that the accuracy and effectiveness of the algorithm are obviously improved.更多还原