具有条件时态特性的RBAC模型.pdfVIP

第36卷 第4期 华 中 科 技 大 学 学 报 (自然科学版) Vo1．36 No．4 2008年 4月 J．Huazhong Univ．of Sci．＆Tech．(Natural Science Edition) Apr． 2008 具有条件时态特性的RBAC模型 欧阳凯 董理君 周敬利 (1武汉科技大学计算机科学与技术学院，湖北 武汉430081； 2华中科技大学 计算机科学与技术学院，湖北 武汉430074) 摘要：提出了具有条件时态特性的角色访问控制(CT—RBAc)模型．以条件周期表达式为基础，通过条件来制 约时态，从而将模型的时间控制维扩展为条件，时间的控制平面，将模型的时态控制平面时间，约束)扩 展为条件，时间，约束的三维控制空间，以达到提高模型控制灵活性和多样性的目的．对条件周期以及并发 执行的条件集进行了形式化描述，对条件事态的约束进行具体论述，通过阻塞路径优化条件元素的并发执行 网络，并对Path()运算复杂度及其优化做了定性探讨． 关 键 词 安全模型；基于角色访问控制；条件；时态；约束 中图分类号：TP309．2 文献标识码：A 文章编号：1671—4512(2008)04—0058—04 A conditional temporal role—based access control model Ouyang Kai Dong Lijun Zhou Jingli (1 College of Computer Science and Technology，W uhan University of Science and Technology， Wuhan 430081；2 College of Computer Science and Technology，Huazhong University of Science and Technology，Wuhan 430074) Abstract：Periodic time theory and RBAC model were considered．Conditional temporal role—based ac— cess control(CT-RBAC)model is proposed，in which the symbolic representation of conditional peri— odic time is brought forward，and the temporal mechanism is controlled by the conditional set．The time control dimension was extended to the control planecondition，time)and the planetime，con— straintwas done to the three—dimensional control spacecondition，time，constraint)SO that the flex— ibility and variety of the control mechanism was improved．The definitions of the conditional periodic expression were described formally and the concurrent transaction logic was used to picture the con— current execution of the condition set．The control mechanism of the conditional temporal constraint and the computing complexity of the conditional set in the CT—RBAC model were also