Role based access control design using Triadic concept analysis

Role based access control is one of the widely used access control models.There are investigations in the literature that use knowledge representation mechanisms such as formal concept analysis(FCA),description logics,and Ontology for representing access control mechanism.However,while using FCA,investigations reported in the literature so far work on the logic that transforms the three dimensional access control matrix into dyadic formal contexts.This transformation is mainly to derive the formal concepts,lattice structure and implications to represent role hierarchy and constraints of RBAC.In this work,we propose a methodology that models RBAC using triadic FCA without transforming the triadic access control matrix into dyadic formal contexts.Our discussion is on two lines of inquiry.We present how triadic FCA can provide a suitable representation of RBAC policy and we demonstrate how this representation follows role hierarchy and constraints of RBAC on sample healthcare network available in the literature.

Consistency maintenance for constraint in role-based access control model

Constraint is an important aspect of role based access control and is sometimes argued to be the principal motivation for role based access control (RBAC). But so far few authors have discussed consistency maintenance for constraint in RBAC model. Based on researches of constraints among roles and types of inconsistency among constraints, this paper introduces corresponding formal rules, rule based reasoning and corresponding methods to detect, avoid and resolve these inconsistencies. Finally, the paper introduces briefly the application of consistency maintenance in ZD PDM, an enterprise oriented product data management (PDM) system.

Two Different Role Division Control Strategies for Torque and Axial Force of Conical Bearingless Switched Reluctance Motor

Although the five-degree-of-freedom magnetic levitation system composed of two conical bearingless switched reluctance motors(CBSRMs)owns the simplest structure,the torque and levitation forces are coupled greatly.Therefore,it is difficult to make the rotor rotate and be fully levitated simultaneously.To solve this problem,two different role division control strategies are proposed in this paper,i.e.individual role division and mutual role division control strategies.The difference between them is the selection of motor which controls the torque or the axial force.In order to understand the characteristics of control variables,the principle and mathematical model of CBSRM are introduced.After that,two control strategies are explained in detail.To verify the demonstrated performance,the simulations are completed with MATLAB/Simulink.

The Roles of Countrywomen in Controlling Non-point Source Pollution

The main causes of non-point source pollution in Taihu Lake are the improper ways of crop production, animal husbandry, and daily runoff. The paper discusses the relationship between countrywomen and non-point source pollution control by 731 questionnaires in Weidu village and 466 questionnaires in Dapu Town. The roles of countrywomen have changed in families and they have close relationship with non-point source pollution. Furthermore, we discuss the possibility and methods of organizing countrywomen in non-point source pollution control.

A distributed role-based access control model for multi-domain environments

Access control in multi-domain environments is an important question in building coalition between domains. Based on the RBAC access control model and the concepts of secure domain, the role delegation and role mapping are proposed, which support the third-party authorization. A distributed RBAC model is then presented. Finally implementation issues are discussed.

校园网中的Role-based Access Control模型设计

介绍了如何将Role basedAccessControl(RBAC)模型应用于校园网的访问控制系统中。其特点是通过分配和取消角色来完成用户权限的授予和取消 ,并且提供了角色分配规则和操作检查规则。安全管理人员根据需要定义各种角色 ,并设置合适的访问权限 ,而用户根据其责任和资历被指派为不同的角色。根据系统的实际需求 。

Centralized Role-Based Access Control for Federated Multi-Domain Environments

The secure interaction among multiple security domains is a major concern. In this paper, we highlight the issues of secure interoperability among multiple security domains operating under the widely accepted Role Based Access Control （RBAC） model. We propose a model called CRBAC that easily establishes a global policy for roles mapping among multiple security domains. Our model is based on an extension of the RBAC model. Also, multiple security domains were composed to one abstract security domain. Also roles in the multiple domains are translated to permissions of roles in the abstract security domain. These permissions keep theirs hierarchies. The roles in the abstract security domain implement roles mapping among the multiple security domains. Then, authorized users of any security domain can transparently access resources in the multiple domains.

An Efficient Role and Object Based Access Control Model Implemented in a PDM System

An effective and reliable access control is crucial to a PDM system.This article has discussed the commonly used access control models,analyzed their advantages and disadvantages,and proposed a new Role and Object based access control model that suits the particular needs of a PDM system.The new model has been implemented in a commercial PDM system,which has demonstrated enhanced flexibility and convenience.

The Research of Role Tree-Based Access Control Model

Towards the crossing and coupling permissions in tasks existed widely in many fields and considering the design of role view must rely on the activities of the tasks process,based on Role Based Accessing Control (RBAC) model,this paper put forward a Role Tree-Based Access Control (RTBAC) model. In addition,the model definition and its constraint formal description is also discussed in this paper. RTBAC model is able to realize the dynamic organizing,self-determination and convenience of the design of role view,and guarantee the least role permission when task separating in the mean time.

A General Attribute and Rule Based Role-Based Access Control Model

Growing numbers of users and many access control policies which involve many different resource attributes in service-oriented environments bring various problems in protecting resource.This paper analyzes the relationships of resource attributes to user attributes in all policies, and propose a general attribute and rule based role-based access control(GAR-RBAC) model to meet the security needs. The model can dynamically assign users to roles via rules to meet the need of growing numbers of users. These rules use different attribute expression and permission as a part of authorization constraints, and are defined by analyzing relations of resource attributes to user attributes in many access policies that are defined by the enterprise. The model is a general access control model, and can support many access control policies, and also can be used to wider application for service. The paper also describes how to use the GAR-RBAC model in Web service environments.

Role of Time-Domain Based Access Control Model

While Role-Based Access Control Model (RBAC) is being analyzed, the concept of Role of Time-domain Based Access Control Model (T-RBAC) is put forward. With time-domain added, both time-domain and authority control roles. The basic idea of T-RBAC is introduced and described formally, and the safely of this model is analyzed. The research shows that T-RBAC fulfills both rules of information security, which are principle of least privilege and separation of duties. With practical application of T-RBCA, it can handle most of the time-related or authority-related problems. What’s more, it also increases the security level, flexibility and dynamic adaptation of the system and has lower complexity than system only handled by authority. This model also can solve conflicts caused by authority.

A Cache Considering Role-Based Access Control and Trust in Privilege Management Infrastructure

PMI （privilege management infrastructure） is used to perform access control to resource in an E-commerce or E-government system. With the ever-increasing need for secure transaction, the need for systems that offer a wide variety of QoS （quality-of-service） features is also growing. In order to improve the QoS of PMI system, a cache based on RBAC （Role-based Access control） and trust is proposed. Our system is realized based on Web service. How to design the cache based on RBAC and trust in the access control model is deseribed in detail. The algorithm to query role permission in cache and to add records in cache is dealt with. The policy to update cache is introduced also.

Role of Soluble Factors in Immune and Normal Sera in the Control of Giardiasis Due to Giardia Iamblia

Hyperimmune sera (HIS), raised against crude giardia antigen, on in vitro interaction, caused more agglutination of Giardia lamblia trophozoites. Heat inactivated HIS possessed a comparable agglutinating activity as the non-inactivated controls. Non-inactivated normal (unimmunized) serum caused immobilization of Giardia trophozoite, which was checked on heat inactivation. Antibodies in immune sera are mainly responsible for agglutination, whereas the heat labile non-immune components control the mobility of the intestinal parasite.

基于策略的动态角色分配模型及应用

访问控制是应用系统中的重要问题之一。传统的基于角色的访问控制(RBAC)方案需要预先定义和同步用户-角色赋值关系,这会带来管理成本和同步开销,并且限制了应用系统的灵活性和动态性。文章提出一种基于策略的动态角色分配模型(Policy-based Dynamic Role Assignment Model——PDRA),它无需同步用户就可以自定义角色,并通过策略匹配的方式实现动态分配。模型完全兼容RBAC,可以成为RBAC良好的扩展机制。文章给出了模型的定义和算法,评估了模型的性能,并在华东师范大学的数据治理平台中进行了应用,验证了该方案的可行性和有效性。

兼职感控护士在病区感染防控中的作用

文章介绍了国内外兼职感控护士的设立和发展,以及组织管理的现况。从促进感控措施落地、促进各类人员参与感控实践及影响组织文化和他人行为等角度阐述了兼职感控护士在病区感染防控中的作用,并总结了未来兼职感控护士的发展方向。

基于RBAC模型的前后端分离系统设计与实现

权限管理是现代信息管理系统核心功能之一,能够让用户可以安全访问系统数据,其中基于角色的访问控制模型是常用的一种权限管理模型,其优点是能够灵活地处理角色与权限之间的变化问题,为复杂的权限管理问题提供便利性。另一方面前后端分离技术能够很好地解决前端页面开发和后端服务器功能开发解耦的问题,让分工双方更加注重各自面对的业务问题,减少对开发人员技术门槛的要求,从而大大提高了开发效率。因此采用前后端分离技术实现通用的基于角色的访问控制系统具有一定的实用价值。

ESG表现对财务风险影响的实证研究

基于2010—2021年A股上市公司的面板数据,采用计量经济方法就ESG表现对财务风险的影响进行实证研究。研究发现,ESG表现可显著降低企业财务风险,其中,内部控制和分析师的关注起完全中介作用,融资约束起到部分中介作用。另外,相比于国有企业,非国有企业的ESG表现对降低财务风险的效应更大。基于此,企业应促进ESG发展以更好降低财务风险。

基于角色和属性的零信任访问控制模型研究

面对网络中大量涌现的安全威胁,传统访问控制模型暴露出权限分配动态性差、面对新威胁敏感度低以及资源分配复杂度高的问题.针对上述问题,提出一种基于角色和属性的零信任访问控制模型,模型使用逻辑回归的方法对访问主体进行信任评估,实现对访问主体属性高敏感度的访问控制,并采用一种全新的资源决策树,在实现访问控制更细粒度安全性的同时,降低了对资源权限分配的时间复杂度.最后,通过在典型应用场景下对模型进行验证,表明该模型在权限动态分配方面明显优于传统访问控制模型.

感恩与自我控制的关系:心理资本的中介作用

以大学生为研究对象,通过2个研究探讨感恩与自我控制之间的关系,及心理资本的中介作用。研究1采用问卷调查法,探究特质感恩与自我控制的关系,及心理资本的中介作用;研究2采用实验法,诱发被试的感恩情绪,探究状态感恩与自我控制的关系,及心理资本的中介作用。结果发现:(1)在控制一般积极情绪后,心理资本在特质感恩与自我控制之间起部分中介作用;(2)与对照组相比,诱发状态感恩的大学生,其自我控制水平更高;(3)在控制一般积极情绪后,心理资本在状态感恩与自我控制之间起部分中介作用。因此感恩不仅直接预测自我控制,也可通过心理资本预测自我控制。

规范化管理在检验科医院感染的预防与控制中的运用探讨

目的:评价规范化管理在检验科医院感染的预防与控制中的运用效果。方法:本次研究调查目标为黎平县人民医院检验科接受常规检查的患者样本,选择2021年2月—2022年4月收集的样本实施常规管理作为对照组,2022年5月—2023年11月收集的样本实施规范化管理为观察组,每组各收集样本500份,本次研究均由21名检验人员参与,对比两组感染控制效果。结果:观察组管理后的各指标合格率均明显高于对照组,其感染发生率比对照组低,差异有统计学意义(P<0.05);观察组管理后的各方面管理质量水平显著高于对照组,其职业暴露风险发生率明显低于对照组,统计差异有统计学意义(P<0.05)。结论:对检验科医院感染的预防实施规范化管理能显著提高感染控制率和样本的检验合格率,全面提升检验科的管理水平,降低医院职业暴露率,值得临床采纳。