Abstract: The role-based access control policy is mainly to take the role mapping to achieve inter-domain interoperability. The role mapping does not consider the extent of the same role of impact on different domains, and different level of mutual trust between one domain and the other domain. Role mapping properties of the threshold and domain properties of the threshold were proposed, to solve the different problems of the same role on different domains and inter-domain trust level, and the different domains were organized in a more fine-grained access control, thus further improving the inter-domain interoperability security issues.

Key words: information security, access control, multi-domain, Role-Based Access Control (RBAC)

摘要： 基于角色的访问控制(RBAC)实现域间互操作的访问控制策略主要是采取角色映射的方法。针对角色在域间映射过程中，没有考虑同一角色对不同域的作用程度和域与域之间互信级别不同的问题。提出角色映射阈值属性和域阈值属性的概念，一定程度上解决了同一角色对不同域的作用程度和域与域间信任级别不同的问题，为不同组织域间实现互操作实现更加细粒度的访问控制，进一步提高了域间互操作的安全性。

关键词: 信息安全, 访问控制, 多域, 角色的访问控制