结合本体和SWRL描述RBAC委托模型  

Description of RBAC delegation model using ontology and SWRL

作　　者：叶春晓[1] 罗娟[1] 周加根[1] 

机构地区：[1]重庆大学计算机学院,重庆400030

出　　处：《计算机工程与应用》2013年第3期109-112,共4页Computer Engineering and Applications

基　　金：国家自然科学基金(No.60803027);中央高校基本科研业务费资助(No.CDJXS11180022)

摘　　要：用户之间的角色委托是RBAC模型需要支持的一种重要安全策略,其主要思想是系统中的用户将角色委托给其他用户,以便以前者名义执行特定的工作。对RBAC委托模型进行了本体建模,借助SWRL(Semantic Web Rule Language)定义的规则对委托中的互斥限制、时间限制、重复限制、前置角色限制等相关限制进行推理,保证了委托系统的安全性和自主决策性。Role delegation between users is an important security policy that should be supported for RBAC mode. The basic idea of delegation is that some users in a system delegate their roles to other users to carry out some specific functions on behalf of the former. This paper describes the RBAC delegation with ontology. Meanwhile some rules in form of SWRL have been defined for the delegation to reason within mutual exclusive constraint, time constraint, overlap constraint and prerequisite role constraint, so as to ensure the security and self-determination of the delegation system.

关 键 词：委托 本体 限制 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]