支持可变上下文参数的多维RBAC模型  

A multi-dimensional RBAC model with variable context parameters

作　　者：欧阳凯[1] 王恒青[1] 董理君[2] 周敬利[2] 

机构地区：[1]武汉科技大学计算机学院,湖北武汉430081 [2]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《华中科技大学学报（自然科学版）》2008年第10期66-70,共5页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(60673001)

摘　　要：在研究GTRBAC和CT-RBAC模型的基础上,提出了一种支持可变上下文参数的多维RBAC(MD-RBAC)模型.该模型通过将反映不同安全因子的约束组织为不同维的约束空间,为不同上下文参数的约束控制提供可靠的基础框架,使得RBAC模型能更好地适用于不同安全需求环境,提高了约束控制的灵活性和多样性.同时,MD-RBAC进一步完善了RBAC模型的状态断言语义,并分析了多维约束语义下的冲突事件和冲突约束.MD-RBAC （multi-dimensional role based access control） model was presented after GTR- BAC （generalized temporal role based access control） model and the CT-RBAC （conditional temporal role based access control） models were analyzed, which is designed to have the capability to capture multi concurrent context parameters in RBAC. In MD-RBAC, the notions of the constraint dimension and the constraint space were introcuced： one type of constraints which represents one type security factor is one constraint dimension, and the constraint space is composed of all types of constraints. Based on the above notions, one reliable constraint framework is provided for the RBAC model, by which the RBAC model can be easily applicable for sophisticated environments and the flexibility and variety of the constraint control mechanism is improved. Furthermore, we enrich the predicate state semantics in MD-RBAC and analyze the conflict event and the conflict constraint for the multi-dimensional constraint semantics.

关 键 词：角色访问控制(RBAC) 多维 约束 断言 冲突 时态 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]