基于描述逻辑的RB-RBAC授权规则冲突检测方法  

Research on Description Logic Based Conflict Detection Methods for RB-RBAC Model

作　　者：于海波[1] 车海燕[1] 金淳兆[1] 

机构地区：[1]吉林大学计算机科学与技术学院,长春130012

出　　处：《计算机科学》2006年第10期101-105,共5页Computer Science

基　　金：国家自然科学基金项目(60173006);国家高技术研究发展计划项目(2003AA118020);"吉林大学‘985’工程"项目。

摘　　要：RB-RBAC(Rule-BasedRBAC)模型克服了RBAC模型的一些局限,提供了基于用户属性自动指派角色的机制。为了检测RB-RBAC模型的策略冲突,提出了一种基于描述逻辑的RB-RBAC模型的形式化方法,在此基础上提出了一种检测有关规则间冲突的方法、一种发现无关规则间冲突的方法和在授权规则集合中检测不同类型冲突的方法,可以根据具体情况选择不同的方法以提高效率。并给出了一种简单的冲突消解方法。RB-RBAC（Rule-Based RBAC）provides the mechanism to dynamically assign users to roles based on a finite set of authorization rules defined by the enterprisers security policy. These rules may have conflict due to negative authorization. We propose a formalization of RB-RBAC by description logic language ALC, and then represent conflict detection method based on knowledge base consistency. Some different methods are suggested to detect conflict among related rules and that among unrelated rules, and they may cooperatively work in one system to provide more efficient detecting service. We also give a simple method to rewrite conflict rules for eliminating policy conflict.

关 键 词：RB-RBAC 描述逻辑 授权规则 策略冲突 冲突检测 

分 类 号：TP393.11[自动化与计算机技术—计算机应用技术]