Research on Extension and Implementation Mechanism for Role-Based Access Control

Role-based access control （RBAC） represents an important advancement in flexibility and granularity of control from the classical discretionary and mandatory access control. To accelerate the research and application of RBAC, NIST in USA has proposed a standard for it. But the standard supports only one constraint type, namely separation of duty. An extended RBAC standard that directly supports the widely used cardinality constraint, e-RBAC, is proposed. An object-oriented implementation framework for RBAC system is proposed and can be used as an API standard. A general core functional module for RBAC systems is implemented with respect to the proposed framework.