RBAC模型中条件时态的研究与设计  

A Design Study for Conditional Temporal in RBAC

作　　者：欧阳凯[1] 周敬利[2] 董理君[2] 

机构地区：[1]武汉科技大学计算机学院,武汉430081 [2]华中科技大学计算机学院系统结构系,武汉430074

出　　处：《计算机科学》2007年第3期283-285,289,共4页Computer Science

基　　金：国家自然科学基金(编号60373088)

摘　　要：具有时态特征的角色访问控制(RBAC:Role Based Access Control)模型能够为RBAC控制机制提供动态的时间控制因素,是目前安全模型领域的研究热点。基于对周期理论和时态RBAC模型的研究,本文认为时态不仅能够为模型提供时间维的控制因素,而且模型中的约束也能作用于时间维形成条件时态平面的控制因素,从而能够进一步提高模型控制的灵活性和多样性。为此,本文提出了条件周期表达式和条件时态的概念,形式化描述了条件时态语义;并通过条件周期事件和角色状态在条件周期下的断言详细论述了条件时态。The temporal characteristic could provide the dynamic control factor for the RBAC （Role Based Access Control） model, which is the research hotspot in the security model field. Based on the research of the periodic time theory andthe Temporal Role Based Access Control （TRBAC） model, we find that the temporal aspect not only could provide the time dimension factor for the model＇s access control, but also the model＇s constrains could impact the time dimension to form the conditional temporal plane. Hence, we put forward the conditional periodic expression and the conditional temporal concept so as to improve the flexibility and the variety of the access control. In this paper, we formally describe the definition of the conditional periodic express and detail the conditional periodic event and the conditional temporal predicate of the role status.

关 键 词：角色访问控制 条件 时态 约束 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]