An Improved Role Based Access Control Model

Contents: This paper firstly introduces some mature role based access control models, analyzes and compares the properties of these models respectively, then, introduces and analyzes the RBAC96 model and ARBAC97 model in detail, and finds out some defects and problems in their practical applications.The paper develops the conception of hierarchy scope to resolve the problems caused by ARBAC97 model, at the basis of which it develops the models called NRRA1 and NRRA2. The NRRA2 model is used to mange the role hierarchy. Moreover, it extends the NRRA2 model to manage all respects of the role based access control, which is called NARBAC. The model could replace the ARBAC97 model.At last, the paper discusses and analyzes some characters of the new model, and shows the advantages of the new model comparing to the ARBAC97 model.