Research on improved RBAC model and its access control strategy

Role based access control (RBAC) is a technology that is attracting increasing attention, particularly for commercial application, because of its potential for reducing the complexity and cost of security administration in large networked application. Nevertheless, there are many deficiencies in the management of user, role and permission, as using the RBAC model in true applications. For instance, when the system gradually expand the scale, the assignment of the user and the assignment of the role¿s efficiency is rapidly decrease; the permission¿s transfer caused by the inheritance of the role, makes the contradictions between the number of role and the granularity of the permission be sharp gradually. In the light of the deficiency of traditional RBAC model¿s access control mechanism, four improved mechanisms are proposed and the improved model¿s access control policy is discussed.