三元形式概念分析的RBAC访问控制设计  

Design of Role Based Access Control for Triadic Concept Analysis

作　　者：王静宇[1] 栾俊清 谭跃生[1] WANG Jing-yu;LUAN Jun-qing;TAN Yue-sheng(School of Information Technology, Inner Mongolia University of Science and Technology, Baotou 014010, China)

机构地区：[1]内蒙古科技大学信息工程学院,内蒙古包头014010

出　　处：《哈尔滨理工大学学报》2020年第2期31-37,共7页Journal of Harbin University of Science and Technology

基　　金：国家自然科学基金(61662056);内蒙古自然科学基金(2016MS0609,2016MS0608)。

摘　　要：形式概念分析可以用于设计访问控制所需要的层次结构,文献中提及的方法通常是将三维访问控制矩阵转换成二元形式背景,进行这种转换主要目的是导出形式概念、概念格结构以及角色层次和RBAC的约束。为了探索三元形式概念分析在RBAC访问控制中的应用,提出了三元形式概念分析对RBAC进行建模的方法,不必将三维访问控制矩阵转换为二元形式背景即能实现角色层次和角色责任分离。实验部分以医疗系统网络为例展示了该方法遵循RBAC角色层次和角色责任分离约束,证明了三元形式概念分析可对RBAC访问控制策略提供合理的表示。Formal concept analysis can be used to design access control hierarchy.There are investigations reported in the literature so far on the logic that transforms the three dimensional access control matrix into dyadic formal contexts.The transformation is mainly to derive the formal concepts,lattice structure and implications to represent the role hierarchy and constraints of RBAC.In order to explore the application of triadic concept analysis in RBAC access control,we have represented RBAC three dimensional matrix as triadic lattice structure achieving role hierarchy and separation of duty constraints without transforming the triadic context into dyadic formal contexts.The experimental analysis show that triadic FCA can provide a suitable representation of RBAC policy and demonstrate how this representation follows role hierarchy and constraints of RBAC on sample healthcare network.

关 键 词：访问控制 概念格 基于角色的访问控制 角色层次 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]