The Access Control Model Based on Role and Function Body

The roles and system resources are connected directly in normal role-based access control (RBAC) model, but the RBAC model can not be used widely in large information systems which have lots of system resources, because of the poor maintainability. This paper proposes an access control model based on role and function body (FRBAC) which adds function bodies between roles and permissions. The paper details the formal description of FRBAC and the extension about authorization constraints on function body. In FRBAC model, roles can so repeatedly use the connection between function bodies and permissions that the authorization workload is reduced obviously.