具有时间约束的动态角色的访问控制策略

基于角色的访问控制(RBAC)的规范性和易管理性使其被业界普遍接受并广泛应用,但因缺乏时间约束和动态调整权限状态能力,不能很好地满足时间敏感活动的安全需求。针对RBAC的不足,提出一个具有时间约束的动态角色访问控制模型,详细描述了时间系统、时间约束指派的相关定义和函数,分析了系统中权限的4种状态以及权限状态转化问题;为了保证权限状态更新的效率及权限状态的有效性,设计了计算权限状态转化的最短时间的相应算法。

Dynamic time-constrained and role-based access control strategy

Because of its specification and easy administration,role-based access control（RBAC）has been generally accepted and widely used,but it can＇t fully meet the security needs of time-sensitive activities for its lack of time constraints and dynamic adjustment permission states.For RBAC＇s shortcomings,a dynamic time-constrained and role-based access control model（DTC-RBAC）is presented.In DTC-RBAC model,we formally define the concepts and functions about time system and time constraints assignments.Furthermore,we analyze four states of permission and permission states transformation,and design an algorithm for calculating the shortest-time of permission states transformation to ensure validity of permission states and efficiency of permission states update.