Abstract:ABSTRACTIn this paper, we study the maintenance of role-based access control (RBAC) models in database environments using transitive closure relations. In particular, the algorithms that express and remove redundancy from a component, a RBAC state, and from conflict constraints. The transitive closure relations on a RBAC state specify the reachability among user groups, roles and from user groups to roles. These relations can assist the process of authorization and make some queries easier to answer. Paper [17] shows that the transitive closure relations on a RBAC model can be used to manage and maintain the model's dynamic changes in a simple and efficient way. In this paper, we firstly show that the transitive closure relations are natural byproducts when formulating RBAC components. We then adapt the conventional RBAC model to accord the inherent reachability of a RBAC model. We show that the use of transitive closure relations as the auxiliary relations for the maintenance of a RBAC state alleviates the process of query evaluation, removing redundancy and the description of hierarchies. Thirdly, in the presence of conflict constraints, we explain how conflicts can be expressed, checked and evaluated under the existence of TC relations, in addition to the removal of conflicts redundancy and finding inferred conflicts. Lastly, we briefly discuss the first-order maintenance operations.All the algorithms for the maintenance are first-order algorithms with simple structures and can be implemented in SQL.

Representation and Reasoning on RBAC: A Nonmonotonic Approach

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A Task-Role Based Access Control Model with Multi-Constraints

Representation and reasoning on RBAC: a description logic approach

A Logic-Based RBAC Framework for Flexible Policies

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Ontology-Based RBAC specification for interoperation in distributed environment

An ASP Based Approach of Inter-Domain Role Mapping

Using Description Logic to Formalize Role-Based Access Control Model.

Using Semantic Web Technologies to Specify Constraints of RBAC

The research for spatial role-based access control model

The expressive language ALCNHR+K(D) for knowledge reasoning

An OWL-Based approach for RBAC with negative authorization

Non-monotonic Reasoning and Argumentation System

Argumentation-Based Non-Monotonic Reasoning of Agents

RBAC based access control model for services compositions cross multiple enterprises

Hybrid Role Hierarchy for the Extended Role Based Access Control Model

Managing RBAC states with transitive relations.

Extended Access Control Model Based on RBAC

Realization Method about Access Control of System Based on Web

A model for role administration using organization structure