Policy-based Dynamic Role Assignment Model and Application
FENG Qi
MA Chenhui
Abstract：Access control is one of the important issues in application systems.Traditional role-based access control(RBAC)schemes require predefining and synchronizing user-role assignment relations,which bring management costs and synchronization overheads,and limit the flexibility and dynamism of application systems.This paper proposes a policy-based dynamic role assign-ment model(PDRA),which can customize roles without synchronizing users,and achieve dynamic assignment through policy matching.The model is fully compatible with RBAC and can be a good extension mechanism for RBAC.This paper gives the defini-tion and algorithm of the model,evaluates the performance of the model,and applies it in the data governance platform of East Chi-na Normal University,verifying the feasibility and effectiveness of the scheme.
Keywords：access controlrole-based access controlpolicy-based dynamic role assignment modelpolicy matching algo-rithmdata governance platform
Publication Date：2024-01-20
Online Publishing Date：2025-08-15(First online date of this platform, not the publication date of the document)
Pages：6( 75-80 )