Abstract:ABSTRACTIn this paper, we study the maintenance of role-based access control (RBAC) models in database environments using transitive closure relations. In particular, the algorithms that express and remove redundancy from a component, a RBAC state, and from conflict constraints. The transitive closure relations on a RBAC state specify the reachability among user groups, roles and from user groups to roles. These relations can assist the process of authorization and make some queries easier to answer. Paper [17] shows that the transitive closure relations on a RBAC model can be used to manage and maintain the model's dynamic changes in a simple and efficient way. In this paper, we firstly show that the transitive closure relations are natural byproducts when formulating RBAC components. We then adapt the conventional RBAC model to accord the inherent reachability of a RBAC model. We show that the use of transitive closure relations as the auxiliary relations for the maintenance of a RBAC state alleviates the process of query evaluation, removing redundancy and the description of hierarchies. Thirdly, in the presence of conflict constraints, we explain how conflicts can be expressed, checked and evaluated under the existence of TC relations, in addition to the removal of conflicts redundancy and finding inferred conflicts. Lastly, we briefly discuss the first-order maintenance operations.All the algorithms for the maintenance are first-order algorithms with simple structures and can be implemented in SQL.

Representation for RBAC model with description logic DL_(RBAC)

Using Description Logic to Formalize Role-Based Access Control Model.

Representation and reasoning on RBAC: a description logic approach

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A Task-Role Based Access Control Model with Multi-Constraints

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Ontology-Based RBAC specification for interoperation in distributed environment

Using Semantic Web Technologies to Specify Constraints of RBAC

The expressive language ALCNHR+K(D) for knowledge reasoning

Representation and Reasoning on RBAC: A Nonmonotonic Approach

A multi-dimensional RBAC model with variable context parameters

Task-based Dynamic Constraint Relations among Roles

RBAC based access control model for services compositions cross multiple enterprises

A Delegation Logic Based AC Model for Collaborative Environment

Managing RBAC states with transitive relations.

Role-extended-based RBAC model

A Constrained Role-Based Delegation Model

Hybrid Role Hierarchy for the Extended Role Based Access Control Model

An Extended RBAC Model Based on Granular Logic

OWL-based RB-RBAC Policy Definition and Reasoning

Kind of user behaviour trust and role based dynamic access control model