一种混合授权的RBAC模型及其UML建模

一种混合授权的RBAC模型及其UML建模 A Hybrid Authorization RBAC Model and Its UML Representation 邵奇峰 SHAO Qifeng 1 first-author 韩玉民 HAN Yumin 1 郑秋生 ZHENG Qiusheng 2 中原工学院软件学院 中原工学院软件学院 School of Software,Zhongyuan University of Technology School of Software,Zhongyuan University of Technology 中原工学院计算机学院 中原工学院计算机学院 School of Computer Science,Zhongyuan University of Technology School of Computer Science,Zhongyuan University of Technology 针对核心RBAC模型在实际应用中存在的不足,提出一种对角色和用户混合授权的RBAC改进模型.在模型中加入直接用户权限指派方便了临时授权,在角色和用户权限中分别设置优先级约束和继承约束避免了权限冲突,给出了模型的形式化描述与认证算法.针对RBAC模型抽象化、形式化及开发者难以理解的问题,基于UML对RBAC改进模型进行了静态和动态建模,缩短了理论安全模型和实际应用开发间的差距. In order to solve the problem of the shortage of the core RBAC model in practical applications,an improved RBAC model integrating the authorization of users and roles is presented.In this model,temporary permission is carried out by direct user authorization,conflict permissions are avoid by adding priority constraint to roles and inheritance constraint to user permissions,and a formal description for the model and the algorithm of authenticate are given.In order to understand the abstract and formal RBAC model for application developers,the static and dynamic models of improved RBAC are represented with UML to reduce a gap between theory model and application development. RBAC 直接用户授权 约束 UML 建模 role based access control（RBAC） direct user authorization constraint unified modeling language（UML） modeling 10.14188/j.1671-8836.2014.05.007 TP393.08 河南省科技攻关项目（112102310368）;河南省教育厅科技攻关项目（12B520073）;河南省自然科学基金项目（082102210082） 2014-05-01 2021-04-01 5 60