Role-based access control method based on three-member management and expansion

Abstract

The invention provides a role-based access control (TMMERBAC) method based on three-member management and expansion. Roles are divided into ordinary roles and system roles, and the system roles are further divided into a system administrator, a security administrator and a security auditor for system management; department concept is introduced, the two authorization methods of user-department-role-authority and user-role-authority are adopted, the TMMERBAC strategy is applied to a specific project management system, and the advantages of the TMMERBAC strategy that authorization flexibility can be improved, authorization complexity can be reduced and control granularity can be divided are realized.

Description

technical field [0001] The present invention relates to the technical field of information confrontation / information security, in particular to a role access control method based on three-person management and expansion. Background technique [0002] With the rapid development of informatization, more and more enterprises use information systems to effectively manage enterprise information. At present, many enterprise information systems at home and abroad contain a lot of secret information about enterprises and employees. In order to effectively prevent illegal users from entering the system to access information resources and prevent legitimate users from accessing system resources without authorization, it is necessary to adopt information security. Access control technology limits the rights of users and criminals. [0003] At present, many enterprises do not adopt any access control strategy, or most of the access control strategies adopted are based on traditional au...

AI Technical Summary

Problems solved by technology

[0003] At present, many enterprises do not adopt any access control strategy, or most of the access control strategies adopted are based on traditional autonomous access control strategy, strong access control strategy or role access control strategy. With the development of the times and the advancement of information technology, information system With the continuous expansion of the scale and the continuous increase and change of the number of users, the independent access control strategy and the strong access control strategy have been difficult to meet the needs of modern information systems. At the same time, the role access control strategy has low flexibility, low scalability, and coarse control granularity. The problem

However, for some new strategies based on traditional access control strategies, such as task-oriented access control strategies, service-oriented workflow access control strategies, and usage control strategies, the scope of application is relatively narrow, and the implementation is difficult. Sex is not high

Images