Access control model based on role and attribute and its applications on space-ground integration networks

After years of development, role-based access control model (RBAC) is already and gradually perfect and has been widely used because of its excellent security and ease of use. But the model is difficult to meet the dynamic access control requirements. For this reason, people put forward the attribute-based access control model (ABAC). The model realizes flexible access control by introducing attributes, solving the problem of RBAC. But in a large environment with many attributes it has the problem of poor usability. In this paper, combining the above-mentioned models, we propose an access control model based on role and attribute, in which RBAC is used to manage static attributes, while ABAC is used to manage dynamic attributes. This model can effectively reduce the number of roles and access control rules, making access control more flexible and easy to use. In addition, we apply this model to the space-ground integration network environment and design distributed access control framework according to the characteristics of this network. This provides ideas for the research and construction of the space-ground integration network.