%0 Journal Article
%T Active authorization rules for enforcing RBAC with spatial characteristics
主动授权规则实施支持空间特性的RBAC*
%A TANG Zhu
%A JU Shi-guang
%A CHEN Wei-he
%A
汤铸
%A 鞠时光
%A 陈伟鹤
%J 计算机应用研究
%D 2010
%I
%X To meet security policy or role structure changes, systems or models should provide a flexible mechanism for enforcing role-based access control (RBAC) with spatial characteristics in a seamless way. This paper used on-when-then-else authorization rules for enforcing RBAC with spatial characteristics. And showed the mapping between the basic elements in RBAC with spatial characteristics and the OWTE rule specification. Established OWTE rules as an enforcement mechanism, which could realize role-based constraints with spatial characteristics at different granularities and make RBAC with spatial characteristics usable in diverse domains. Finally discussed briefly how these authorization rules could be automatically generated from security policies using RBAC with spatial characteristics.
%K security policy
%K role
%K active authorization rules
%K role-based constraints with spatial characteristics
安全策略
%K 角色
%K 主动授权规则
%K 带有空间特性角色约束
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=A9D9BE08CDC44144BE8B5685705D3AED&aid=2CE19670D559DB0629DF2DAF73E1C905&yid=140ECF96957D60B2&vid=DB817633AA4F79B9&iid=E158A972A605785F&sid=592CC3414B588215&eid=D56713C22DA9FDE8&journal_id=1001-3695&journal_name=计算机应用研究&referenced_num=0&reference_num=8