一种扩充时间约束关系的RBAC模型.pdf

一种扩充时间约束关系的RBAC模型 eXtended TimeConstraintsRole—Based AccessControl 姜浩伟陈娟娟赵晓欣 (海军工程大学机要系 武汉430033) Abstract RBAC(Role—BasedAccessContr01)is attentionasa mechanism，which attractingincreasing security tothe structureandfacilitatesadministration usersand mapsnaturally by organization’S safety separating logically viarolesand andthe permissions users，roles，permissions betweenthem．This constrainting relationships paper a describestimeconstraintsmodel TimeConstraints on XTCRBAC(eXtendedRole—BasedAccessContr01)based RBAC96 Ravi defines timeof rolesandcanresolve Sandhu，which to proposedby permissions executing assigned a the of of torolesandthecollaborationofrolesinRBACas re— problemsdynamic permissions changes assigned in suh．Inaddition，XTCRBACmodelhasbeen aMiddleCourtOfficeAutomation applied System． Access Keywordscontrol，Role，Timeconstraints，RBAC Mason大学的RaviSandhu等人在此基础之上，提 1 引言 出了RBAC96模型L1j。 随着计算机技术和通信技术的迅猛发展，基于 网络的大型应用系统对安全性提出了越来越高的要 求。美国军方于1985年提出的可信计算机系统评估任何RBAC模型所必需的最小需求，如用户、角色、