A flexible role- and resource- based access control model

摘要

RBAC realizes the separation of duty and helps to manage the users with various roles. However, RBAC cannot work well in distributed environment. In this paper, a flexible role- and resource- based access control model (called RRBAC) is proposed. RRBAC introduces role and resource concepts to access control, and provides a flexible approach for many security domains. RRBAC supports different types of resources sharing in open distributed environment. In the paper, we have a detailed description of RRBAC. Thereto, a use case is given to show how the model works, which illustrates that RRBAC is sound and reasonable.