Layer Model and Algorithm of Organization Authorization Based on Position Network

After the RBAC model formalized in 1992 by David Ferraiolo and Rick Kuhn, the models of organization authorization have been developing fast. Among these models, the one based on position network will be used widely and has a prospective future. Algorithms for single-layer model and multi-layer model based on position network were cited in this article. Meanwhile an algorithm example was given at the end of this article. 1. Preface In modern complex government systems, there are too many roles to be setup and provided to the users. If the duties or privileges of users are changed, or the objects in system are changed, it will take lots of time to adjust the relationship of User-Role and Role-Object. The integration of different government application systems has been affected by this bottleneck. For improving the efficiency and security and reducing the workload of system maintenances, " Position " was added between the " User " and " Role ". This makes it more close to the reality of Chinese government. After turning this into reality, we found that a straight and effective algorithm was needed to evaluate the rationality of the authorization process, make sure the strictness, and find out the problems. So the single-layer model algorithm and multi-layer model algorithm for organization were put forward. We can easily connect the users, positions, roles and objects in different systems with network model. Show as figure 1. How to look at the connection clearly and check out whether it is right? We need to setup a kind of model system to evaluate the feasibility of the connection.