一种RB-RBAC模型规则冲突消解算法  

Conflict Resolution Algorithm for Authorization Rules of RB-RBAC Model

作　　者：于海波[1] 车海燕[1] 吕巍[1] 

机构地区：[1]吉林大学计算机科学与技术学院,长春130012

出　　处：《计算机工程与应用》2006年第36期59-62,共4页Computer Engineering and Applications

基　　金："吉林大学985工程"项目资助

摘　　要：RB-RBAC(Rule-Based RBAC)模型克服了RBAC模型的一些局限,提供了基于用户属性自动指派角色的机制。RB-RBAC模型允许进行否定授权,可能在进行授权的过程中出现冲突。在研究RB-RBAC模型冲突规则间关系的基础上,提出了一种基于否定优先的冲突消解算法,能够在保持原有语义的条件下,自动改写RB-RBAC模型中冲突的授权规则来消解冲突。RB-RBAC （Rule-Based RBAC） provides the mechanism to dynamically assign users to roles based on a finite set of authorization rules defined by the enterprise＇s security policy.These rules may have conflict due to negative authorization.According to relations among conflict authorization rules,this paper introduces a conflict resolution algorithm based on denials take precedence.This algorithm can rewrite conflict rules for eliminating policy conflict without changing original meaning of rules.

关 键 词：RB-RBAC 授权冲突 冲突消解 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]