关键词: 访问控制, 角色, 上下文, 规则, 策略

Abstract:

Based on the analysis concerning the drawbacks of applying RBAC, the concepts of context and rule were introduced, and the permissions were divided into enabled ones, active ones and limited ones, then a new access control model, the role and rule-based access control(RRBAC) model, was proposed. Through defining the security policy in design and capturing the corresponding contextual information in running, this model can provide finer access control, and reduce the workload of PA in the model of RBAC significantly.

Key words: access control, role, context, rule, policy