An Extended Access Control Model Based on Role and Department

Abstract

This a new access control model DRBAC based on role and department is proposed, which extends the traditional role-based access control (RBAC) model. The new model adds the abstraction of the department property and simplifies the operational process by means of the authenticating management based on transaction.