Method and cloud server for constructing role-based access control system

Abstract

Embodiments of the present invention provide a method for constructing RBAC and a cloud server. The method includes: receiving a request message from a client for requesting to construct a hierarchical RBAC role set, the request message carrying UPA data; obtaining an RBAC template, and performing role matching according to the RBAC template and the UPA data to determine the The first role set of the hierarchy; perform role mining according to the first role set and the UPA data to determine the RBAC role set; send the RBAC role set to the client, so that the client builds RBAC based on the RBAC role set system. In the embodiment of the present invention, not only the semantic accuracy of the RBAC role set can be improved and the cost can be reduced, but also the efficiency of constructing the RBAC system can be improved.

Description

technical field

[0001] The present invention relates to the field of information technology, and in particular, relates to a method for constructing a role-based access control (Role-based Access Control, RBAC) system and a cloud server. Background technique

[0002] Access control is a defense measure against unauthorized use of resources, and its basic goal is to ensure users' reasonable and effective access to system resources. There are roughly three methods of access control, namely the traditional discretionary access control (Discretionary Access Control, DAC) method and mandatory access control (Mandatory Access Control, MAC) method, and the popular RBAC method in recent years. Among them, the granularity of the DAC method is too fine, while the granularity of the MAC method is too coarse, and both of them have a large workload and are not easy to manage. The RBAC method is policy-neutral, and can be used to represent different types of policies including DAC and MA...

Images