CAJ | 학술논문

在RBAC系统中,各个用户所拥有角色的列表会存放在系统中,当用户进入系统前会进行验证检查,如果验证通过则让用户得到其所拥有的功能.但是这个验证工作对现今的有些应用略嫌不足,为此在原RBAC系统中加入了使用控制模块添加了多个属性,它允许验证、义务和条件三种决定策略去检查权限,让用户能在系统行进过程中去重新判断用户所能使用的功能.在一个RBAC系统中,在用户和被存取的对象中加入属性的概念可以让一些以前的RBAC系统经过改造获得新的应用,而保留RBAC本来的优点.
재RBAC계통중,각개용호소옹유각색적렬표회존방재계통중,당용호진입계통전회진행험증검사,여과험증통과칙양용호득도기소옹유적공능.단시저개험증공작대현금적유사응용략혐불족,위차재원RBAC계통중가입료사용공제모괴첨가료다개속성,타윤허험증、의무화조건삼충결정책략거검사권한,양용호능재계통행진과정중거중신판단용호소능사용적공능.재일개RBAC계통중,재용호화피존취적대상중가입속성적개념가이양일사이전적RBAC계통경과개조획득신적응용,이보류RBAC본래적우점.
In the RBAC system,the list of each user's roles will be stored in the system.When users enter the system to verify checks before,they will be entitled if passed.However,the validation falls short of some applications today.For this purpose,a number of attributes arc added to the control module in the original RBAC system,which allows authentication,obligations and conditions of the three decision strategies to check the permissions.In this way,users can re-determine their rights in the working process of the system.In a RBAC system,adding the concept of property tO users can let some previous RBAC system adapted to acquire new applications,while retaining the original advantages of RBAC.