摘要： 访问控制是保证企业信息系统安全的一项重要措施,但现有的访问控制模型如DAC、MAC、RBAC和TBAC等,都不能完全满足企业环境的访问控制需求,因此引进了基于企业环境的访问控制模型——基于任务和角色的访问控制模型T-RBAC,并给出其实现框架。

关键词: 基于角色的访问控制, 基于任务的访问控制, 企业环境, 工作流

Abstract: Access control is an important measure to secure the information system in the enterprise, but the existing access control models, suchas DAC, MAC, RBAC and TBAC, can’t fully meet the requirements of the enterprise environment, therefore this paper introduces a new accesscontrol model for enterprise environment, called task-role-based access control model (T-RBAC). In the end, an implementation framework is givenaccording to T-RBAC.

中图分类号: 

• TP309