基于RBAC的权限复杂性与可靠性控制模型研究

面对业务系统的规模不断扩大,传统的RBAC(Role-Based Access Control)权限控制变得越来越复杂,不仅增加了企业运维难度,也越来越容易因为权限分配不合理而出现安全事故.为解决以上问题,在对RBAC层次模型研究的基础上,进一步将权限治理分为可靠性、复杂性、权限修正策略三部分,从不同维度进行权限管理....

RBAC-BASED AUTHORITY COMPLEXITY AND RELIABILITY CONTROL MODEL

Facing the expanding scale of business system,the traditional RBAC authority control is becoming more and more complex,which not only increases the difficulty of enterprise operation and maintenance,but also is more and more prone to safety accidents because of unreasonable authority allocation.In order to solve the above problems,based on the research of RBAC hierarchical model,the authority governance is further divided into three parts:reliability,complexity and authority revision strategy,and authority management is carried out from different dimensions.On the basis of RBAC,RBAC1,RBAC2 and RBAC3 were further introduced into the governance strategy.A RBAC-based authority control model was designed and implemented by combining RBAC layering with reliability calculation,complexity calculation and privilege revision strategy.The experiments show that the model effectively reduces the complexity of large-scale authority management and improves the stability with the operation of the system.