基于OWL的RB-RBAC策略定义和推理  

OWL-based RB-RBAC Policy Definition and Reasoning

作　　者：于海波[1] 谢琦[1] 吕巍[1] 

机构地区：[1]吉林大学计算机科学与技术学院,长春130012

出　　处：《吉林大学学报（理学版）》2006年第5期754-759,共6页Journal of Jilin University:Science Edition

基　　金：国家自然科学基金(批准号:60373098);吉林大学"985"工程项目基金

摘　　要：提出一种基于本体对RB-RBAC策略进行定义的方法,该方法能定义复杂的属性表达式,并支持多种属性值类型,可以在策略中直接定义属性值间的偏序关系和角色间的层次关系.具有不同语法结构的属性表达式也可以比较,以发现不同授权规则间可能存在的关系.在推理机的支持下,除了能够访问控制决策推理外,还可以判定授权规则间的优先关系,并发现相关规则间的策略冲突.An Ontology-based approach to define the authorization policies of an RB-RBAC model was proposed, by which one can effectively define complex attribute expressions, quasi-order relation definition among attribute values and role hierarchies among roles in the OWL style policies. Comparison between attribute expressions without identical syntax structures is permitted to gain an insight into the relationships of all kinds of authorization rules. We can make authorization decision and perform seniority levels reasoning via an OWL reasoner. Moreover, conflicts among related authorization rules can be detected by consistency check.

关 键 词：WEB本体语言 RB-RBAC模型 授权策略 属性表达式 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]