基于RBAC的角色挖掘及授权查询方法的研究  

Research on role mining and authorization query method based on RBAC

作　　者：孙伟[1] 王淑礼[1] 

机构地区：[1]信阳师范学院计算机与信息技术学院,河南信阳464000

出　　处：《计算机时代》2016年第11期11-13,16,共4页Computer Era

基　　金：河南省高等学校重点科研项目计划资助(17A520054)

摘　　要：针对现有角色挖掘结果存在冗余,以及授权管理在安全性等方面存在的问题,将角色挖掘与授权查询分别转化为布尔矩阵分解问题及部分最大可满足性问题,给出一种基于RBAC的角色挖掘及授权查询方法。应用实例结果表明:该方法挖掘的角色集更为简洁,且具有可解释性;查询搜索的角色组合能够严格保证系统的安全性,且满足授权的有效性要求。Aiming at the problems of redundancy in the existing role mining results, and security in authorization management, etc., the role mining and authorization query are transformed into the problems of Boolean matrix decomposition and partial maximal satisfiability, and a role mining and authorization query method based on RBAC（Role-Based Access Control）is proposed. The application example shows that the set of optimal roles dug by proposed method is succinct and interpretable; the role＇s combination of the query and search can strictly guarantee the security of the system, and meet the requirements of the validity of the authorization.

关 键 词：角色挖掘 授权查询 布尔矩阵分解问题 部分最大可满足性问题 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]