Extended RBAC model for multilevel relational database

doi:10.3778/j.issn.1002-8331.2010.33.038

Computer Engineering and Applications ›› 2010, Vol. 46 ›› Issue (33): 132-138.DOI: 10.3778/j.issn.1002-8331.2010.33.038

• 数据库、信号与信息处理 • Previous Articles Next Articles

Extended RBAC model for multilevel relational database

ZHONG Yong^1，2，GUO Wei-gang¹，ZHONG Chang-le¹

1.Information and Educational Technology Center，Foshan University，Foshan，Guangdong 528000，China
2.Postdoctoral Mobile on Computer Application，Nanjing University of Science and Technology，Nanjing 210094，China

Received:2009-04-02 Revised:2009-06-22 Online:2010-11-21 Published:2010-11-21
Contact: ZHONG Yong

面向多级关系数据库的RBAC扩展模型

钟勇^1，2，郭伟刚¹，钟昌乐¹

1.佛山科学技术学院信息与教育技术中心，广东佛山 528000
2.南京理工大学计算机科学与技术博士后流动站，南京 210094

通讯作者: 钟勇

Abstract

Abstract: An extended model of role based access control is proposed，which introduces classified policy into standard RBAC.The model erases the downward information flow by extended rules of read and write and some authorization constraints，and keeps the expressive power and flexibility of the standard RBAC by semantics of separation of category relations and session classes.The model can be used in the information systems that need not only the MAC to control the information flow but also the flexibility of the RABC.After a formal definition of the model，the implementation rules，access decision policies，management of authorization distribution，implement mechanism in multilevel relational database，BNF notations and application of the model are also discussed.

Key words: role based access control, mandatory access control, multilevel relational database

摘要： 提出了一种角色访问控制扩展模型，该模型在标准RBAC体系中引入分级策略，通过扩展读写规则和授权限制消除了RBAC中向下的信息流，并通过范围分离和会话密级等语义保留了标准RBAC的灵活性和表达力。该模型可应用在众多既需要控制信息流动的强制存取控制又需要有角色存取机制灵活性的系统中。在给出模型的形式化定义后，对模型的实现规则、访问策略、权限分配管理、在多级关系数据库中的实现机制及模型的BNF范式以及具体应用做了说明。

关键词: 角色访问控制, 强制访问控制, 多级关系数据库

CLC Number:

TP309.12

ZHONG Yong^1，2，GUO Wei-gang¹，ZHONG Chang-le¹. Extended RBAC model for multilevel relational database[J]. Computer Engineering and Applications, 2010, 46(33): 132-138.

钟勇^1，2，郭伟刚¹，钟昌乐¹. 面向多级关系数据库的RBAC扩展模型[J]. 计算机工程与应用, 2010, 46(33): 132-138.

[1]	TAO Yong, WANG Chengliang. Attributive-based RBAC policy representation and reasoning using OWL [J]. Computer Engineering and Applications, 2014, 50(19): 66-69.
[2]	LIU Pengyuan1，2, SUN Baolin1. RBAC framework supporting poset and sync & async permission modeling [J]. Computer Engineering and Applications, 2014, 50(10): 108-115.
[3]	CHEN Jin，LV Hongbing，PAN Xuezeng. Hybrid mandatory model composed of BLP and Clark-Wilson policy [J]. Computer Engineering and Applications, 2011, 47(5): 65-68.
[4]	YE Chunxiao1，HAN Yongzheng1，HU Haibo2. Study on delegation with Chinese Wall security policy [J]. Computer Engineering and Applications, 2011, 47(29): 121-123.
[5]	XU Lu，ZHANG Hong-qi，DU Xue-hui，WANG Chao. Application system-oriented mandatory access control model [J]. Computer Engineering and Applications, 2010, 46(9): 107-110.
[6]	Nurmamat Helil¹，Kaysar Rahman^1，2，Azhar Halik^1，2. Flexible hybrid RBAC model and inconsistency resolution [J]. Computer Engineering and Applications, 2010, 46(36): 101-104.
[7]	Nurmamat Helil^1，2，Kaysar Rahman¹. Representaion of RBAC model with negative authorization in OWL and conflict detection [J]. Computer Engineering and Applications, 2010, 46(30): 82-85.
[8]	MU Ya-li^1，2，ZENG Hao³，YAO Hong². Role-task based controlled delegation model [J]. Computer Engineering and Applications, 2010, 46(3): 87-89.
[9]	WU Hai-yan，TAN Cheng-xiang，WANG Hai-hang. Application research of BLP in networks isolation system [J]. Computer Engineering and Applications, 2007, 43(15): 6-8.

Extended RBAC model for multilevel relational database

面向多级关系数据库的RBAC扩展模型

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 9

Recommended Articles

Metrics