The modeling of RBAC model based on UML and XACML

In Role-based Access Control (RBAC) model, different roles have different permissions, users are treated as members of the respective roles and get the permissions of this roles. In this paper, we use the credit management system as an example, and make use of use-case diagrams, class diagrams and collaboration diagrams of the visualized UML to describe the visualization modeling of RBAC model; At the same time, we describe the access permissions between users and objects in the RBAC model, combined with XACML, realized the formal description of the access control policy, and integrate the RBAC model into this system to give it RBAC characteristics, and we also provide details on the modeling method and concrete realization of the RBAC model in this system. Our work will help developers understand the RBAC model more easily, and shorten the gap between security models and system development.