Abstract:

The access control policy of information grid was proposed, so was the definition of permit and role. How to use one-dimensional string to represent permit and role, the containing relationship of operation, and the inheriting relationship of role were analysed. The method to deal with the contradiction and redundancy of role assignment by containing relationship of operation and inheriting relationship of role was described. The performance of permit assignment by the system automatically was evaluated.

Key words: information grid, RBAC, role representation, contradiction and redundancy treatment

摘要：

提出了信息网格的访问控制策略并给出权限和角色的定义，进一步讨论了权限和角色的一维表示、操作的蕴含关系和角色的继承关系，分析了如何利用操作的蕴含关系和角色的继承关系进行角色授权的矛盾处理和冗余处理，并分析了系统自动进行权限分配的性能。

关键词: 信息网格；基于角色的访问控制；角色表示；矛盾和冗余处理