RBAC模型中条件时态的研究与设计

A Design Study for Conditional Temporal in RBAC

具有时态特征的角色访问控制(RBAC:Role Based Access Control)模型能够为RBAC控制机制提供动态的时间控制因素,是目前安全模型领域的研究热点。基于对周期理论和时态RBAC模型的研究,本文认为时态不仅能够为模型提供时间维的控制因素,而且模型中的约束也能作用于时间维形成条件时态平面的控制因素,从而能够进一步提高模型控制的灵活性和多样性。为此,本文提出了条件周期表达式和条件时态的概念,形式化描述了条件时态语义;并通过条件周期事件和角色状态在条件周期下的断言详细论述了条件时态。

The temporal characteristic could provide the dynamic control factor for the RBAC （Role Based Access Control） model, which is the research hotspot in the security model field. Based on the research of the periodic time theory andthe Temporal Role Based Access Control （TRBAC） model, we find that the temporal aspect not only could provide the time dimension factor for the model＇s access control, but also the model＇s constrains could impact the time dimension to form the conditional temporal plane. Hence, we put forward the conditional periodic expression and the conditional temporal concept so as to improve the flexibility and the variety of the access control. In this paper, we formally describe the definition of the conditional periodic express and detail the conditional periodic event and the conditional temporal predicate of the role status.