面向智慧城信息系统访问控制冲突检测研究.pdf

Software Engineering and Applications 软件工程与应用, 2014, 3, 161-171 Published Online December 2014 in Hans. /journal/sea /10.12677/sea.2014.36019 Research of Conflict Detection in Access Control on Information Systems of the Sapiential City Shengya Han, Guangwei Zhang State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing Email: shengyah@163.com th th th Received: Oct. 25 , 2014; revised: Nov. 28 , 2014; accepted: Dec. 4 , 2014 Copyright © 2014 by authors and Hans Publishers Inc. This work is licensed under the Creative Commons Attribution International License (CC BY). /licenses/by/4.0/ Abstract In the circumstance of the sapiential city, resource sharing and collaboration are necessary in in- formation systems. The traditional access control technology is faced with new demands and challenges. In this paper, we extend the access control model based on RBAC and lead the element of “application” into this model. Different applications include different roles and permissions so that they can grant a person different roles coming from different applications for the implemen- tations of unified authorizations. Model constraints and parameter configurations are raised in this paper for conflict detection. The detection avoids conflicts effectively and ensures correct au- thorizations that include basic operations of tree elements, the relationship of roles and permis- sions and the authorization rules. Keywords Sapiential City, Access Control, Conflict Detection 面向智慧城市信息系统的访问控制冲突 检测研究 韩圣亚，张光卫 161 面向智慧城市信息系统的访问控制冲突检测研究 北京邮电大学网络与交换国家重点实验室，北京