Research Of Role-Based Database Access Control

Database access control is an important research content in database security, in which Role-Based Access Control Model (RBAC) is researched and applicated widely. Based on analysising and discussing the model family RBAC96, a kind of extended RBAC model (ERBAC) is given. The work for ERBAC model include: (1) By means of RBAC combined with Task-Based Access Control Model, least privilege constraint is further refinement and dynamic delegation of authority is implemented. (2) With the thought of Mandatory Access Control, user and permission are added the property of the security level, so the security of the model is further strengthening. (3) At the basis of RBAC model, the new model is included the expansion of some new concepts, formal description, and implementation of the access control rules. (4) ERBAC static modeling and dynamic modeling process is achieved with UML, so the gap between the theoretical model and application system development is reduced. (5) In model implementation, the response to a user can run multiple tasks simultaneously, the determining of the task priority is resolved; With the problem of many users and many roles execute the same permission on many occasions, the order of them is resolved. (6) Finally, a prototype system for the expanded model is designed to test the system performance and security. The new model and the original model were compared to analyze the feasibility of the new model.The contents studied in this paper is an universal significance in access control of the database security, and in the military, financial and other areas with the higher safety and more complex application, it has extensive research meaning and application value.