摘要： 分析了几种访问控制技术,讨论了基于角色的访问控制模型以及该模型中各种元素的作用及相互关系,引入对象和动作元素来完善对权限的定义,提出了一种改进的基于角色的访问控制模型,并以此为基础在上海市公务网上实现了一个安全授权管理系统。

关键词: 电子政务, 访问控制, 授权管理, 角色, 公务网

Abstract: This paper analyzes several kinds of access control technique and discusses the RBAC(role-based access control) model and the element and their relationships in RBAC, then gives an improved role-based access control (IRBAC) model by introducing two new elements object and action to refine the definition of permission element, and implements a security authorization management system in Shanghai official network based on this model.

中图分类号: 

• TP393.08