一种基于角色访问控制_RBAC_新模型及其实现机制.pdfVIP

37 1 Vol. 37, No . 1 2000 1 JOURNA L OF COMPU TER RESEARCH DEVELOPMENT Jan. 2000 ( RBAC) * 乔　颖　须　德 　戴国忠 (1000 0) * ( 100044) ( - , ) role based access control RBAC , RBAC NRBAC . , RBAC 96 . NRBAC , RBAC -( TPB-2-KLP) . RBAC , . , , , , TP309. 2 - A NEW ROLE BASED ACCESS CONTROL MODEL AND ITS IMPLEMENT MECHANISM * QIAO Ying, XU De , and DAI Guo-Zhong ( Centre of Industrial Management Design, Institute of Sof tware, Chinese A cademy of Science, Beji ing 1000 0) * (Dep artment of Comp uter Science and Technology , N orthern J iaotong niversity, Beij ing 100044) , - Abstract In this paper the construction and implementation of a role based access control ( ) , - RBAC model are discussed w hich are tw o hot topics in the research of role based access con- trol. A new RBAC model w hich is named NRBAC modelis presented. Besides comprehension, this model has advantages of being close to the real world and having a consistent form over RBAC96 models. For the implementation of NRBAC model, a new implement mechanism, w hich is a binary tw o-key-lock pair access control scheme using prime factorization (T PB-2-KLP) , is presented. T his mechanism overcomes the disadvantages of the implement mechanism of RBAC w hich have already been presented, and it has both the advantage of the small number of lock vector up