基于条件时态的角色访问控制模型的继承性  

Inheritance of conditional temporal role based auess control model

作　　者：欧阳凯[1] 蔡婷[1] 周敬利[2] 王恒青[1] 

机构地区：[1]武汉科技大学计算机学院,湖北武汉430081 [2]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《华中科技大学学报（自然科学版）》2008年第6期25-27,共3页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(60673001)

摘　　要：在继承基于条件时态的角色访问控制(CT-RBAC)的条件周期理论和约束关联的基础上,完善了该模型的角色关系约束,规范了相应的角色继承约束语义.同时,提出一种能够确保在继承条件下静态权责分割(SSD)策略安全实施的机制,避免了由SSD局限性所导致的冲突.最后,给出了一个实现原型,通过性能分析测试,说明在提高原型系统安全性的情况下,性能的稍微损失是可以接受的.Based on the inheritance of the conditional periodic theory of conditional temporal role based access control （CT-RBAC） and constraint relations, further detailed work of role related constraints of this model was made, and the relevant role inheritance constraint semantics was formalized. Meanwhile, a mechanism to ensure the static separation of duty （SSD） policy was addressed which can perform in security on the condition of inheritance, by which means avoiding the conflicts made by the natural localization of conditional temporal SSD in inheritance. Finally an implemented prototype and its related performance testing were provided, by which proved the slight loss is receivability in the case of improving the prototype system security.

关 键 词：角色访问控制 角色关系 静态权责分割 条件 时态 继承 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]