无线网络中基于地理区域的RBAC模型

Location-based RBAC Model in Wireless Network Environment

针对移动计算环境下访问控制的需求，在传统RBAC模型的基础上引入了地理区域的概念，提出了基于地理区域的RBAC模型。利用目前发展较为成熟的各种位置感知系统，获取访问者的地理位置信息；在地理区域上定义了集合运算，为避免区域的重复定义，提出了最少区域集合的概念；对改进后的模型给出了形式化定义，利用最小区域集合为角色在不同的区域分配权限，并描述了基于地理区域的RBAC模型中实现访问控制的具体步骤。

At present Role-based access control has developed a mature model and has been widely investigated. However,in wireless computing environments, there are still issues not addressed by the existing RBAC models. In this paper,the notion of geographical location was incorporated into the traditional RBAC model and a Location-based RBAC model was brought forth. In the extended model,the availability of roles and permissions may depend on a user＇s location. The formalized definition of the extended model was given and how to utilize the location information to determine whether a subject can access to a given object was shown in this paper.