Abstract:ABSTRACTIn this paper, we study the maintenance of role-based access control (RBAC) models in database environments using transitive closure relations. In particular, the algorithms that express and remove redundancy from a component, a RBAC state, and from conflict constraints. The transitive closure relations on a RBAC state specify the reachability among user groups, roles and from user groups to roles. These relations can assist the process of authorization and make some queries easier to answer. Paper [17] shows that the transitive closure relations on a RBAC model can be used to manage and maintain the model's dynamic changes in a simple and efficient way. In this paper, we firstly show that the transitive closure relations are natural byproducts when formulating RBAC components. We then adapt the conventional RBAC model to accord the inherent reachability of a RBAC model. We show that the use of transitive closure relations as the auxiliary relations for the maintenance of a RBAC state alleviates the process of query evaluation, removing redundancy and the description of hierarchies. Thirdly, in the presence of conflict constraints, we explain how conflicts can be expressed, checked and evaluated under the existence of TC relations, in addition to the removal of conflicts redundancy and finding inferred conflicts. Lastly, we briefly discuss the first-order maintenance operations.All the algorithms for the maintenance are first-order algorithms with simple structures and can be implemented in SQL.

Using Description Logic to Formalize Role-Based Access Control Model.

Representation and reasoning on RBAC: a description logic approach

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A Task-Role Based Access Control Model with Multi-Constraints

A Semantic and Trust Based Framework for Rbac User-Role Assignment

The expressive language ALCNHR+K(D) for knowledge reasoning

Ontology-Based RBAC specification for interoperation in distributed environment

Using Semantic Web Technologies to Specify Constraints of RBAC

Product Knowledge Reasoning

The research for spatial role-based access control model

Representation and Reasoning on RBAC: A Nonmonotonic Approach

A Logic-Based RBAC Framework for Flexible Policies

Alc(P)(U): An Integration Of Description Logic And General Rules

A Novel and Effective RBAC-Based Access Control Model in Flexible Information Coding System

Relation-Based Access Control: an Access Control Model for Context-Aware Computing Environment

Research and implementation of role-based RBAC administration model

Managing RBAC states with transitive relations.

RBAC based access control model for services compositions cross multiple enterprises

An OWL-Based approach for RBAC with negative authorization

A model for role administration using organization structure

Reasoning with Very Expressive Fuzzy Description Logics