权限扩展RBAC模型的本体表示和实现

Ontology representation and realization of extended permission in RBAC

针对基于角色的访问控制(RBAC)模型对权限实体的刻画能力不足,提出了带权限层次扩展的RBAC模型。为结合本体在知识表示和推理方面的优势,提出了该模型的本体表示和实现方法。该方法使用Web本体语言(OWL)表示该扩展模型,借助语义Web规则语言(SWRL)定义模型中应用逻辑规则,隐式授权知识经规则推理获得。在此基础上,通过SPARQL协议和RDF查询语言(SPARQL)查询命令生成显式和隐式授权视图,实现系统安全状态分析。最后,给出了具体应用示例,表明该方法的可行性。

Role Based Access Control （RBAC） has deficiency in characterizing permissions, so an extended RBAC model with permission hierarchy was presented. To utilize advantages of ontology in knowledge representing and reasoning, an ontology based representation and realization method of the extended model was proposed. Web Ontology Language （OWL） was used to formalize the ontology of this model, and some specific reasoning rules in the model were defined by Semantic Web Rule Language （SWRL）. Implicit knowledge about authorization was derived through rule based reasoning. Based on this, explicit and implicit authorization views were generated for security analysis through the SPARQL Protocol and RDF Query Language （ SPARQL）. Finally, a case study was introduced to show the feasibility of the method.