Role-Based Access Control - Models, Mechanisms and Tools

本项目将结合基于角色的控制（RBAC）的基础和应用研究，采用三管齐下的方法，通过开发1）模型，2）机制和3）工具，以支持RBAC在未来系统中的有效部署。 RBAC的基本概念是不直接授予用户访问权限。 相反，权限是基于角色授予的，用户是相应角色的成员。这简化了授权的管理。 RBAC起源于20世纪70年代早期的多用户和多应用程序联机系统。最近，由于RBAC在应用程序级别的使用，人们对它的兴趣又重新抬头。 该项目将为在操作系统级和应用程序级提供使用RBAC的通用设施提供良好的科学和工程基础。

This project will pursue a combination of basic and applied research on role-based control (RBAC), using a three-pronged approach, by developing 1) models, 2) mechanisms and 3) tools, to support the effective deployment of RBAC in future systems. The basic concept of RBAC is that users are not directly granted access permissions. Instead permissions are granted based on roles, and users are made members of appropriate roles. This simplifies management of authorizations. RBAC owes its origins to multi-user and multi-application on-line systems of the early 1970's. There has been a recent resurgence of interest in RBAC stemming from its use at application level. This project will provide a sound scientific and engineering foundation for providing general purpose facilities for using RBAC, both at the operating systems level and applications level.