Abstract: In order to overcome the insufficient access control for information and the complex operation in the model of RBAC, a new access control model based on classification management is put forward. It startes from the analysis of corporate management structure, then simulates the process of internal information flow, and introduces the concept of “representation”, extractes three basic attributes in the role and characterization, at last draws this model and gives its realization. The model is an effective expansion for traditional access control model, it performs well in practice, and provides a new idea for the research of access control.

Key words: RBAC, classification management, access control, representation