一种满足静态职责分离约束的角色划分方法

A Role Division Method Constrained by Static Separation of Duty

现有自顶向下的角色工程忽略企业对敏感任务的要求,产生的角色集安全性低。为提高角色定义的安全性,提出一种满足静态职责分离约束的用户角色分配方法。从静态互斥角色约束集出发,利用贪婪算法产生互斥角色对并将其映射为稀疏图。使用韦尔奇·鲍威尔着色法将相邻顶点染为不同的颜色,生成的着色数近似等于最小用户数。根据角色被染颜色进行角色划分,被划分为同一组的角色只能指派给同一个用户。实验结果表明,该方法执行效率快、安全性高,可有效节省存储空间。

The existing top-down role of the project ignores the requirements of the enterprise for sensitive tasks,resulting in a low set of security.In order to improve the security of role division,a user role assignment method constrained by static separation of duty is proposed.Based on the static mutex exclusive role constraint set,the greedy algorithm is used to generate mutex role pairs and map them to sparse graphs.By using Welch Powell coloring method,adjacent vertices are dyed into different colors,and the number of coloring is approximately equal to the minimum number of users.Roles are divided according to their colors,and roles assigned to the same group can only be assigned to the same user.Experimental results show that this method is efficient,secure and it can save storage space effectively.