Abstract:Role-Based Access Control (RBAC) has been recognized as a strategy which reduces the cost and complexity of security administration in large-scale networked applications. A general family of RBAC models called RBAC96 was proposed by Sandhu et al. [1], which formally deflnes the relations among user, role and permission using the notion of set membership. Constraints is an important aspect of RBAC, which impose restrictions on acceptable conflgurations of the difierent components of RBAC. Nevertheless, it was discussed informally in the RBAC96 model. There has been some efiorts to present a logical framework for the access control models. Most of these works are based on flrst-order logic or its extensions. However, excessively rich expressiveness may bring on complex computation and confusion. We present a novel formalization of RBAC using a description logic approach. Compared with flrst-order logic, DLs achieve a better tradeofi between the computational complexity of reasoning and the expressiveness of the language. We choose the DL language ALC to represent core and hierarchical RBAC, and ALCQ that extends ALC by qualifled number restrictions to express RBAC constraints, including separation of duty and role cardinality. Based on our logical framework it is feasible to reason about RBAC and check the consistency of RBAC with constraints via a DL reasoner(e.g. RACER).

Formal Specification for Object-oriented Model of Role-based Access Control

A Task-Role Based Access Control Model with Multi-Constraints

Constraint Specification for the Model of Role-Based Access Control

An Object-Oriented Model of Access Control Based on Role

Constraint Specification for Object Model of Access Control Based on Role

Ontology-Based RBAC specification for interoperation in distributed environment

Practical Way to Implement Role-Based Access Control in Security Administration System

Using Semantic Web Technologies to Specify Constraints of RBAC

The research for spatial role-based access control model

OBJECT-BASED ACCESS CONTROL MODEL

UML Representation of RBAC Technology

An Extended Role-Based Access Control Model and Method

Method of Finely Granular Access Control Based on RBAC

Organization and Role-Based Access Control Model

A Team-role-based Document Access Control Model

Role Engineering with SKAOS for Systems Employing RBAC

Realization Method about Access Control of System Based on Web

Full Business Model Oriented Access Control Method

Multilevel Multi-policy Access Control Model for Collaborative Application

Implementation and Application of Role-Based Access Control

Using Description Logic to Formalize Role-Based Access Control Model.