基于逻辑合一的访问控制规则描述  

Access Control Rule Description Based on Logic Unify

作　　者：韩道军[1,2] 黄泽龙[1] 翟浩良[1] 李磊[1] 

机构地区：[1]中山大学软件研究所,广州510275 [2]河南大学数据与知识工程研究所,开封475004

出　　处：《计算机科学》2011年第10期140-144,共5页Computer Science

基　　金：国家自然科学基金(61003140)资助

摘　　要：现有的访问控制规则描述方式不易表达一类主体、客体间具有包含关系的访问控制规则。针对此问题,提出一种基于逻辑中合一思想的算法。算法首先将访问控制请求转换为逻辑提问,同时根据逻辑回答给出相应的访问控制请求应答;然后使用事实描述访问控制规则中的各个要素,并通过在系统运行过程中对非ground事实的变量的动态例化实现灵活的访问控制。最后,通过一个实例及分析说明了算法的有效性。Traditional methods are hard to describe the subsume relationship of subjects and objects among some access control rules.In this paper,we built an algorithm based on logic unify to resolve which problem.Firstly,we converted access control request to logic question,obtained the access control result by means of logic answer.Next,we utilized the facts to describe the each component of access control,and we realized the flexible access control by using the dynamic instantiation of variables in non-ground facts during the system running period.Finally,our experiment results show that our algorithm is effective.

关 键 词：访问控制 逻辑合一 规则描述 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]