A finer-grained resource management model oriented to role-based access control

Due to the problem that resource management is the foundation of authorization management and the requirement of unified description and management of resources with any type and arbitrary granularity, a finer-grained resource management model named FGRMM^RBAC is proposed. An extensible organization and description method is present to manage the resource, resolving the unified description, organization and management of resources with various types and granularities. Resource types, resources, operations, privileges and their relations are described and analyzed to support dynamic and finer-grained authorization. It supports unified description and management of multi-type, multi-granularity resource, and dynamic, normalized management of these elements. The model is formalized in set theory, predicate logic based on graph theory, and its security is demonstrated through the consistency of the authorization state and the security of privilege diffusion. The analysis indicates that the model holds features of dynamic, flexibility, scalability and practicability of resource management.