CAJ | 학술논문

基于角色的访问控制(RBAC)通过角色来控制用户对资源的访问,极大地简化了安全管理.虽然对RBAC的研究比较成熟,但由于RBAC目前缺乏形式化的表示,使得RBAC中的一些概念和性质存在不同的理解.描述逻辑(DL)是一种基于对象的知识表示的形式化系统,它是一阶逻辑的一个可判定的子集,具有合适定义的语义,并且具有很强的表示能力.为了给出RBAC的形式化方法,以描述逻辑为工具,RBAC96模型为基础,提出了RBAC的描述逻辑DLRBAC.用描述逻辑的符号给出了RBAC中主要的元素和关系的形式化定义,并证明了这种描述逻辑表示对于RBAC模型的忠实性.所提出的RBAC形式化模型可以作为进一步研究RBAC的理论基础.
기우각색적방문공제(RBAC)통과각색래공제용호대자원적방문,겁대지간화료안전관리.수연대RBAC적연구비교성숙,단유우RBAC목전결핍형식화적표시,사득RBAC중적일사개념화성질존재불동적리해.묘술라집(DL)시일충기우대상적지식표시적형식화계통,타시일계라집적일개가판정적자집,구유합괄정의적어의,병차구유흔강적표시능력.위료급출RBAC적형식화방법,이묘술라집위공구,RBAC96모형위기출,제출료RBAC적묘술라집DLRBAC.용묘술라집적부호급출료RBAC중주요적원소화관계적형식화정의,병증명료저충묘술라집표시대우RBAC모형적충실성.소제출적RBAC형식화모형가이작위진일보연구RBAC적이론기출.
Role-Based Access Control (RBAC)controls the user's access to resources by indirectly using roles, which simplifies the security management greatly. Although the research of RBAC model is a mature area, the lack of formalization of RBAC results in uncertainty and confusion about the concepts and meaning of RBAC. Description Logic (DL) is a kind of object-based knowledge representation formalism, and also a decidable fragment of first-order predicate logic, with well-defined semantics and powerful representation capability. To give a formal description of RBAC, this paper took RBAC96 as a reference model and proposed a new formalized method to RBAC with description logic, called DL_(RBAC), which gives formal definitions to the concepts and relations of RBAC This paper also proved that the formal representation is faithful to RBAC model Based on the formalized model, we can further Study RBAC.