CAJ | 학술논문

为了实现不同异构自治域之间安全策略的统一描述与集成,以本体为基础,提出了一种支持RBAC96 模型的基于角色访问控制策略定义机制OntoRBAC.利用本体的通用性,对不同异构系统的安全策略进行统一描述,并能够利用本体的上层概念描述从语义层次上实现对不同策略的集成,并以此为基础,提出了一套用于策略描述的本体模型族.为了实现访问控制决策的推理,OntoRBAC以规则的定义为基础,扩展本体推理算法,使其更适用于描述与推理不同自治域的RBAC策略.
위료실현불동이구자치역지간안전책략적통일묘술여집성,이본체위기출,제출료일충지지RBAC96 모형적기우각색방문공제책략정의궤제OntoRBAC.이용본체적통용성,대불동이구계통적안전책략진행통일묘술,병능구이용본체적상층개념묘술종어의층차상실현대불동책략적집성,병이차위기출,제출료일투용우책략묘술적본체모형족.위료실현방문공제결책적추리,OntoRBAC이규칙적정의위기출,확전본체추리산법,사기경괄용우묘술여추리불동자치역적RBAC책략.
To describe and integrate various policies applied in different domains,the definition of the family of OntoRBAC based on the ontology of a general role-based access control (RBAC) policy is proposed,which can support and extend the RBAC96 model.The uniform ontology-based description mechanism of secure policies is applied in OntoRBAC,which can be used to describe different secure policies in distributed systems and integrate policies in semantic level with upper concepts.In addition,some rules have been defined to reason within the OntoRBAC to extend the inference algorithms in ontology,which makes the system accommodate itself to RBAC policies better.