Abstract:A secure and effective ERBAC(extended role-based aecess control) model for permission-authorization based on RBAC(role-based access control) model is presented.The ERBAC model uses multi-hierarchy roles,defines differential permissions and introduces an additional allocation process of priory permits to RBAC.Besides,necessary cache structure and related security method are provided.