面向信息安全的具有时间特性RBAC授权策略  

Authorization strategy of role-based access control with temporal character for information security

作　　者：宫阿都[1,2] 李新友[3] 李晨[4] 陈晨[3] 蔡洪春[1,2] 

机构地区：[1]民政部/教育部减灾与应急管理研究院,北京100876 [2]北京师范大学地表过程与资源生态国家重点实验室,北京100876 [3]国家信息中心信息安全研究与服务中心,北京100045 [4]北京邮电大学网络与交换技术国家重点实验室信息安全中心,北京100876

出　　处：《自然灾害学报》2008年第6期30-35,共6页Journal of Natural Disasters

基　　金：国家高技术研究发展计划(863计划)项目(2006AA01Z455;2006AA120102)

摘　　要：授权管理是访问控制中一个非常重要的部分。以往对于RBAC访问控制模型的约束的讨论多是基于非时间特性的。具有时间特性的RBAC授权策略的研究对传统的RBAC模型进行了透彻的分析,引入时态条件约束。从访问控制策略的数学建模出发,提出了对用户、资源、策略等的数学定义,设计出了基于时态角色的跨域授权策略规则,并用形式化的数学定义来描述。Management of authorization is a major element of access control. Usually the discusses on restriction of role-based access control（RBAC） odels were based on theirs non-time property. In this paper, the temporal condition constrain was added into the RBAC authorization rules and the new RBAC authorization rules with temporal property were introduced and analyzed based on the analysis of the traditional RBAC models. Beginning from mathematic modeling of new access control rules, the mathematic definitions of users, resources and rules were advanced and the authorization rules based on temporal role were developed.

关 键 词：授权策略 角色访问控制 域间操作 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]