摘要： 从综合信息管理系统以及软件系统集成的需求出发，分析了NIST RBAC模型的局限性，在此基础上对其模型进行扩充，提出ERBAC模型。该模型适用于多种客体且具体客体不确定的情况。文章还给出了ERBAC模型的具体定义和应用实例。

关键词: 细粒度, 多客体, 访问控制, 综合信息系统

Abstract: This paper analyses the requirements of comprehensive information management system and software integration. It proposes an extended model named ERBAC, which is based on the analysis of the shortcomings of NIST RBAC model. The extended model is applicable to the case of having multiple and unknown objects. And the definition and an instance of the ERBAC model are described.

Key words: fine grain, multi-object, access control, comprehensive information management system

中图分类号: 

• TP393