权限扩展RBAC模型的本体表示和实现  

Ontology representation and realization of extended permission in RBAC

作　　者：周加根[1] 叶春晓[1] 

机构地区：[1]重庆大学计算机学院,重庆400044

出　　处：《计算机应用》2012年第9期2624-2627,共4页journal of Computer Applications

基　　金：重庆大学研究生科技创新基金资助项目(CDJXS11180022)

摘　　要：针对基于角色的访问控制(RBAC)模型对权限实体的刻画能力不足,提出了带权限层次扩展的RBAC模型。为结合本体在知识表示和推理方面的优势,提出了该模型的本体表示和实现方法。该方法使用Web本体语言(OWL)表示该扩展模型,借助语义Web规则语言(SWRL)定义模型中应用逻辑规则,隐式授权知识经规则推理获得。在此基础上,通过SPARQL协议和RDF查询语言(SPARQL)查询命令生成显式和隐式授权视图,实现系统安全状态分析。最后,给出了具体应用示例,表明该方法的可行性。Role Based Access Control （RBAC） has deficiency in characterizing permissions, so an extended RBAC model with permission hierarchy was presented. To utilize advantages of ontology in knowledge representing and reasoning, an ontology based representation and realization method of the extended model was proposed. Web Ontology Language （OWL） was used to formalize the ontology of this model, and some specific reasoning rules in the model were defined by Semantic Web Rule Language （SWRL）. Implicit knowledge about authorization was derived through rule based reasoning. Based on this, explicit and implicit authorization views were generated for security analysis through the SPARQL Protocol and RDF Query Language （ SPARQL）. Finally, a case study was introduced to show the feasibility of the method.

关 键 词：基于角色的访问控制 本体 WEB本体语言 授权视图 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]