中文摘要：

基于角色的访问控制（RBAC）被广泛地应用于各类复杂信息系统中,通过对用户指派角色进行授权以访问系统中的特定数据或资源。一些问题已在应用过程中逐渐暴露：如何较好地展现角色层次关系、用户角色指派和角色指派中约束如何体现、冗余的角色授权如何检测与解除等。从可视化的角度采用层次信息可视化技术来辅助RBAC中的角色管理。首先阐述了所研究的问题,并定义了可视化过程中使用的多亲树结构;然后给出一个多亲树规范化过程,以建立一个符合可视化要求的标准角色层次;随后提出一种双层可视化范例来展示角色管理过程,其中下层用于展示角色层次和权限,上层用于配置用户节点;此外,针对所述问题给出若干交互方法,以可视地辅助解决角色管理中的约束和冗余问题。

英文摘要：

Role-Based Access Control（RBAC） has been widely applied to authorize certain users to access certain data or resources within complex information systems.Several problems are coming about during the application of RBAC models,which include well-representing the role hierarchy,following the constraints applied in user-role assignments and role-role relations,revoking redundant roles and assignments,etc.This paper addressed these problems from the perspective of information visualization to facilitate role management in RBAC,particularly leveraging the experience of tree（s） visualization.A detailed problem statement was made first,and the data structure of multi-parents tree was defined.Then a multi-parents tree normalization process was proposed to construct a refined role hierarchy for elegant representation.Subsequently,a two-layered paradigm,the nether for displaying role hierarchy and permissions,and the upper for placing users,was presented for the visualization of role management in RBAC.Additionally,some specific interaction techniques were put forward to visually aid in solving the constraint and redundancy problems.