| 带时间特性的角色授权约束 |
| |
| 引用本文： | 董光宇,卿斯汉,刘克龙.带时间特性的角色授权约束[J].软件学报,2002,13(8):1521-1527. |
| |
| 作者姓名： | 董光宇 卿斯汉 刘克龙 |
| |
| 作者单位： | 中国科学院,软件研究所,信息安全技术工程研究中心,北京,100080 |
| |
| 基金项目： | 国家自然科学基金资助项目(60083007);国家重点研究发展规划973资助项目(G1999035810) |
| |
| 摘 要： | 授权约束是基于角色的访问控制模型中一个非常重要的部分.已经有方法来对约束进行形式化的描述,但主要集中在有关约束的静态特性的描述上.提出一套形式化地描述时间特性的模型,使之能够描述带时间特性的授权约束.对已有的角色授权约束模型,即约束描述语言进行了深入研究,并进行了相应的扩展.这种扩展后的语言称为RCLT(role-based constraints language with time-character).同时,对RCLT的时间效率的优化以及在RCLT规则被违反时如何恢复合法状态的问题进行了形式化的讨论.RLCT语言被证明可以很好地表示出对授权约束的时间特性的需求,但在效率优化和状态恢复方面要找到实用、高效的通用算法还需要作进一步的工作,这也是将来研究工作的主要目标.
|
| 关 键 词： | 信息安全 访问控制 角色 约束 时间特性 |
| 文章编号： | 1000-9825/2002/13(08)1521-07 |
| 收稿时间： | 2001/3/28 0:00:00 |
| 修稿时间： | 8/9/2001 12:00:00 AM |
Role-Based Authorization Constraint with Time Character |
| |
| DONG Guang-yu,QING Si-han and LIU Ke-long.Role-Based Authorization Constraint with Time Character[J].Journal of Software,2002,13(8):1521-1527. |
| |
| Authors: | DONG Guang-yu QING Si-han and LIU Ke-long |
| |
| Abstract: | Authorization constraint is an important part in role-based access control models. There are some methods to specify constraint formally, but they mainly focus on the static character. A formal model is proposed to describe time character of constraint in this paper. A founded constraint model, namely a constraint specification language, is studied in detail, and is extended. The language is called RCLT (role-based constraints language with time-character) after extending. At the same time, the problems of optimizing the efficiency RCLT system and restoring to the safe when rules are violated are discussed.RCLT is testified to be able to express the time chracter of constraint well.However,there are further works to be done for finding practical,efficient and general algorithms for optimizing efficiency efficiency and the restoration of safe state,which is the main goal of future research. |
| |
| Keywords: | information security access control role constraint time character |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《软件学报》浏览原始摘要信息 |
|
点击此处可从《软件学报》下载全文 |
|
