摘要
提出一种基于本体对RB-RBAC策略进行定义的方法,该方法能定义复杂的属性表达式,并支持多种属性值类型,可以在策略中直接定义属性值间的偏序关系和角色间的层次关系.具有不同语法结构的属性表达式也可以比较,以发现不同授权规则间可能存在的关系.在推理机的支持下,除了能够访问控制决策推理外,还可以判定授权规则间的优先关系,并发现相关规则间的策略冲突.
An Ontology-based approach to define the authorization policies of an RB-RBAC model was proposed, by which one can effectively define complex attribute expressions, quasi-order relation definition among attribute values and role hierarchies among roles in the OWL style policies. Comparison between attribute expressions without identical syntax structures is permitted to gain an insight into the relationships of all kinds of authorization rules. We can make authorization decision and perform seniority levels reasoning via an OWL reasoner. Moreover, conflicts among related authorization rules can be detected by consistency check.
出处
《吉林大学学报（理学版）》
CAS
CSCD
北大核心
2006年第5期754-759,共6页
Journal of Jilin University:Science Edition
基金
国家自然科学基金(批准号:60373098)
吉林大学"985"工程项目基金
