基于语义的RBAC模型权限冲突检测方法

Detecting conflict of permissions in RBAC model with semantic approach

RBAC模型通过角色将用户和权限进行了逻辑分离,然而在角色分配及权限授予时,导致的冲突检测没有得到彻底解决。提出了一种基于语义的RBAC模型冲突检测方法:利用描述逻辑作为逻辑框架构造知识库,对RBAC模型及其中的冲突关系进行了形式化的表示和推理,通过检测角色分配和权限授予过程中出现的用户角色冲突、角色权限冲突以及用户权限直接授予冲突关系,最终有效地检测出权限冲突,保证用户权限的一致性和正确性。

The RBAC（Role Based Access Control） model separates user with permission logically by introducing role,to make authorization process manageable.However,in the process of generating roles and permissions for authorization,the conflict detection problem has not been well resolved.A method for detecting permission conflicts in RBAC model based on semantic is proposed by adopting description logics to construct knowledge base,to represent RBAC model and reason the relationships of permissions and their conflicts.Thus conflicts of permissions can be detected effectively with reasoning in knowledge base by detecting conflicts when roles are assigned to user,permissions are assigned to role and permissions are assigned to user directly,to ensure consistency and correctness of user permission in RBAC model.