A RBAC extended model and its application in unified access control for web application systems

On the basis of analyzing the access control demands of web application systems, this paper proposed an extended role-based access control model: RBAC4WAS, and gives the formal descriptions of the extended parts. At the same time this paper shows an application of RBAC4WAS and proposes a unified access control solution (UACS), discusses principles of UACS and its implement methods in detail.