带时间特性的RBAC.pdfVIP

1000-9825/2003/14(11)1944 ©2003 Journal of Software 软 件 学 报 Vol.14, No.11 ∗ 带时间特性的角色访问控制 + 黄 建 , 卿斯汉, 温红子 ( 中国科学院 软件研究所,北京 100080) ( 中国科学院 信息安全技术工程研究中心,北京 100080) Timed Role-Based Access Control + HUANG Jian , QING Si-Han, WEN Hong-Zi (Institute of Software, The Chinese Academy of Sciences, Beijing 100080, China) (Engineering and Research Center for Information Security Technology, The Chinese Academy of Sciences, Beijing 100080, China) + Corresponding author: E-mail: stanleyhuangjian@ Received 2002-08-16; Accepted 2003-04-16 Huang J, Qing SH, Wen HZ. Timed role-based access control. Journal of Software, 2003,14(11):1944~1954. /1000-9825/14/1944.htm Abstract: The research work of RBAC is greatly emphasized in recent years. However, the main work focuses on some characters which have nothing to do with the time character. A RBAC model with time character called TRBAC is described and the former constraint is extended so that it can describe the time character. Some algorithms are developed to solve the state change problem of the time-constraint and the sessions. The consistent state of the model is analyzed and the problem for maintaining the consistent state is discussed. Key words: information security; access control; role; constraint; time; consistency 摘 要: 基于角色的访问控制模型的研究工作近年来得到了广泛的重视,但主要工作均立足于与时间特性无 关的其他方面.形式化描述了一个引入时间后的角色访问控制模型.在该模型中对原有授权约束进行了时间扩 充.提出的相应算法解决了时间授权约束和会话的状态转变问题. 同时分析了模型的一致性状态,并讨论了一致 性状态维护问题. 关键词: 信息安全;访问控制;角色;约束;时间;一致性 中图法分类号: TP309 文献标识码: A 访问控制是信息安全领域中一个基础性的核心问题.本文要讨论的主题是基于一种较新的访问控制模型: 基于角色的访问控制(role-based access control,简称RBAC).在RBAC 之中,权限被赋予角色,而不是用户.当一个 角色被指定给一个用户时,此用户就拥有了该角色所包含的权限.而 RBAC 的约束(constra