具有条件时态特性的RBAC模型  

A conditional temporal role-based access control model

作　　者：欧阳凯[1] 董理君[2] 周敬利[2] 

机构地区：[1]武汉科技大学计算机科学与技术学院,湖北武汉430081 [2]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《华中科技大学学报（自然科学版）》2008年第4期58-61,共4页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(60673001)

摘　　要：提出了具有条件时态特性的角色访问控制(CT-RBAC)模型.以条件周期表达式为基础,通过条件来制约时态,从而将模型的时间控制维扩展为<条件,时间>的控制平面,将模型的时态控制平面〈时间,约束〉扩展为〈条件,时间,约束〉的三维控制空间,以达到提高模型控制灵活性和多样性的目的.对条件周期以及并发执行的条件集进行了形式化描述,对条件事态的约束进行具体论述,通过阻塞路径优化条件元素的并发执行网络,并对Path()运算复杂度及其优化做了定性探讨.Periodic time theory and RBAC model were considered. Conditional temporal role-based access control （CT-RBAC） model is proposed, in which the symbolic representation of conditional periodic time is brought forward, and the temporal mechanism is controlled by the conditional set. The time control dimension was extended to the control plane （condition, time） and the plane （time, constraint） was done to the three-dimensional control space （condition, time, constraint） so that the flexibility and variety of the control mechanism was improved. The definitions of the conditional periodic expression were described formally and the concurrent transaction logic was used to picture the concurrent execution of the condition set. The control mechanism of the conditional temporal constraint and the computing complexity of the conditional set in the CT-RBAC model were also detailed.

关 键 词：安全模型 基于角色访问控制 条件 时态 约束 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]