Study on an Improved Extended-RBAC Model

摘要

This paper expounds the shortages of RBAC96 model in the aspects of the authorization, access rules, and fine-grained access control in the practical application; and analyses the shortcomings of the extended role-based access control model (E-RBAC), which integrates the authorization of users and roles, one new expansion model was presented and achieved. The new model not only can achieve fine-grained access control, but also make higher security by introducing of access rules and audit function.