Abstract:

As the traditional role-based access control (RBAC) models have shortcomings when applied in lager-scale enterprise applications, an improved RBAC model based on autonomy domain (AD-RBAC) is proposed. This model introduces ‘autonomy domain’ to describe the organization structure; divides groups into administrative group and common group, which enhances the expression capability of the group; adopts organization structure domain description model to construct group hierarchy and group types. All these contribute to the simple and intuitive realization of multilevel user authorization management. In the expert information service grid, AD-RBAC is used to achieve authorized service and data access of grid nodes based on virtual domain, which proves the feasibility and effectiveness of this model.
 

Key words: role-based access control, autonomy domain, group, virtual domain