摘要： 近年来，出现了大量基于角色存取控制（RBAC）的商业实现和实验性实现。数个RBAC系统的中心都是一管理设施，由该设施显示并管理角色及角色继承关系。尽管这些管理设施较常规存取控制方法体现了巨大的管理优势，但对于一个具有良好结构的有向角色图的属性所能提供的种种特性而言，这些工具并未充分利用这些特性。为了最好地满足RBAC对大中型企业可真正伸缩适应的目标，要极大地依赖于用户／角色及角色／特权关系管理中角色图的特点和使用。描述了一个以图为中心的RBAC实现，称之为角色控制中心（RCC），这一实现可以满足即使是最大型企业的各种目标。

关键词: 基于角色的存取控制, 角色控制中心, 身份

Abstract: In recent years numerous commercial and expermental Role-Based access Control (RBAC) implernentation have emerged.Ceatral to several RBAC systems is an administrative facility for displaying and managing role and role inheritance relationships as a directedrole graph. Although these administlative facilities provide great administrative advantages over conventional access control methods, thesetools do not take full advantage of the features that can be offered by the properties of a well-structured role graph. In order to optimally meetthe objectives of RBAC that truly scale to the needs of large and medium sized enterprises, depends greatly on the characteristics and use of arole graph in the management of user/role and rolelprivilege relationships. In this paper we describe a graph centric RBAC irnplementation,refereed to as the Role Control Center (RCC), that achieves these objects for even the largest enterprise.

中图分类号: 

• TP393.08