【摘要】 安全内核的功能是维护系统内部信息的安全。通常是根据不同的安全需求,在安全内核中实施不同的安全策略。RBAC是一种能够满足系统多方面安全需求的访问控制机制。传统RBAC在改变角色的操作集合时,易与外部应用程序发生冲突。通过把访问系统内部信息的操作对象化,并作为角色分派给应用程序,在对象化的操作和应用程序之间派生出一个角色权限检查对象,灵活地实施分层对象技术,能够克服传统RBAC的不足,使RBAC的安全策略能够任意改变。更多还原

【Abstract】 Function of security kernel is to maintain security of information inside system.Security policy is implemented by using a module in security kernel usually by different security demand.RBAC is access control mechanism which can satisfy more security de-mand of system.But tradition RBAC can not easy change operate set of role,and would conflict with exterior application.Lack of tra-ditional RBAC can be got over by objecting operation of information,and dispatch them to application as role,and implemented object hierarchy model.更多还原