Role-based access control: database systems research

基于角色的访问控制：数据库系统研究

• 批准号: 3051-2007
• 负责人: Osborn, Sylvia
• 金额: $ 1.82万
• 依托单位: University of Western Ontario
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2011
• 资助国家: 加拿大
• 起止时间: 2011-01-01 至 2012-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=473662
• 关键词: Role; based; access; control; database

The overall goal of this research is to provide theory and tools to help users manage access control in complex computer systems. Access control is the ability provided in a computing system to say who can do what operations on what data. This research does not involve cryptography, nor does it involve users identifying themselves to a computer system (this is called user authentication). Access control takes over once the user has been validated to decide what that user is allowed to do, read and write. In a complex computer environment, this can be a complex management task.

本研究的总体目标是为帮助用户管理复杂计算机系统中的访问控制提供理论和工具。访问控制是计算系统中提供的一种能力，可以确定谁可以对哪些数据执行哪些操作。这项研究不涉及密码学，也不涉及用户向计算机系统标识自己(这称为用户身份验证)。一旦用户被验证，决定允许该用户做什么、读什么和写什么，访问控制就会接管。在复杂的计算机环境中，这可能是一项复杂的管理任务。