The Applied Research And Implementation Of An Extended RBAC Model In Integrated Management System

Access control as an important measure to ensure the safety of management systems has become an essential part of Safety Management Systems(SMS).According to the different models,access control has different approaches of authority management.In the access control models,the role-based access control(RBAC)has been widely used in the management systems because it achieves the separation of users and permissions by introducing the concept of role and supports three well-known security principles.However,the RBAC model also has its own shortcomings.Although RBAC model can reduce the complexity of system authorization management.But the user-role and role-permission assignment is still a relatively heavy work,especially with the establishment of integrated management systems of enterprises and institutions,the shortcoming is more obvious.In order to overcome this shortcoming,it is necessary to extend and improve the RBAC model.In view of the above situation,firstly,the various access control models are analyzed in detail.And on the basis,the PCP-RBAC model is proposed in this paper.The PCP-RBAC model is an RBAC model that bases on the expansion of role and permission.It simplifies the user-role and role-permission assignment by introducing the concept of post and combined-permission.Secondly,the paper make an further study of base-role set and combined-permission set,after that a base-role generation algorithm is given.On the basis of the base-role generation algorithm,a combined-permission partition algorithm which suits for the PCP-RBAC model is presented.Finally,the application of PCP-RBAC model in the integrated management system is studied which bases on the integrated management system of Xi'an graduates' employment service.The design of system authority management module bases on PCP-RBAC model is completed,and this module is ultimately realized.