基于Petri网的RBAC策略验证的研究  

Research on Verification of RBAC Policies Based on Petri-net

作　　者：魏定国[1] 吴时霖[2] 

机构地区：[1]广东商学院,广东广州510320 [2]复旦大学计算机系,上海200433

出　　处：《小型微型计算机系统》2004年第5期827-832,共6页Journal of Chinese Computer Systems

摘　　要：本文为 RBAC模型提出了一个基于着色 Petri网的策略规格说明和分析的架构 .Petri网能够捕获基数、责任分离等约束 ,而且能对优先和依赖约束进行说明 .使用 Petri网的可达到性分析技术对 RBAC策略进行正确性验证 .The crucial issue of verification of role based access control policies has not been adequately investigated. In this paper, we develop a colored Petri net based policy specification and analysis framework for an RBAC model. The Petri net model can capture all the cardinality and separation of duty constraints. Moreover, the model also allows specification of the precedence and dependency constraints. We use the Petri net reachability analysis technique for verifying correctness of RBAC policies.

关 键 词：PETRI网 RBAC 策略 验证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]