关键词: 访问控制, 基于角色的访问控制模型, 细粒度, 部门

Abstract: Concerning the characteristics and disadvantages of RoleBased Access Control (RBAC) model, the departmentrole based access control (D-RBAC) finely granular model was proposed in this paper. A formal description for the model elements, the implement mechanism of the model, and the algorithm of access control were given. In D-RBAC model, role was related to department, which effectively implemented the accurate control of access objects and data, and the permission assignment problem of the same role in different departments was resolved. The fine-grained permission control was realized as well. Through the model, the number of roles was decreased, the development assignments were simplified and the accuracy and flexibility of permission management were increased. Finally, an application example of this model being used in one equipment safeguard comprehensive information system was given.

Key words: access control, Role Based Access Control (RBAC) model, finely granular, department