基于逻辑程序的柔性授权框架  

Flexible authorization framework based on logic programs

作　　者：张明生[1] 陈武[2] 

机构地区：[1]贵州民族学院,贵州贵阳550025 [2]西南大学计算机与信息科学学院,重庆400715

出　　处：《通信学报》2009年第S1期23-27,共5页Journal on Communications

基　　金：国家自然科学基金资助项目(90718009);贵州省科学技术基金资助项目([2009]2125);贵州省省长基金项目([2009]024)~~

摘　　要：提出一个基于逻辑程序和基于角色访问控制并且具有柔性授权、逻辑形式化和策略集成特点的柔性授权框架。研究了如何使用逻辑程序强大的表达能力确定现实中复杂的安全需求,平衡柔性访问控制规范的表达性、简单性和有效性,处理柔性访问控制中的冲突,利用常识推理刻画柔性特征,以及集成已有授权理论的优点。A flexible authorization framework based on logic programs and RBAC, with flexible authorization, logic-based formalization and integration of policies, was proposed.It had been investigated in the framework how to specify complex security requirements in real world using the powerful expressiveness of logic programs, how to balance expressiveness, simplicity and efficiency in a flexible access control specification, how to deal with conflicts in flexible access control, how to make use of common reasoning to materialize the flexible characteristics, and how to integrate the advantages of the prevailing authorization theories.

关 键 词：逻辑程序 基于角色访问控制 策略集成 柔性授权框架 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]