Reachability analysis for attribute based user-role assignment model

Journal of Computer Applications ›› 2014, Vol. 34 ›› Issue (2): 428-432.

• Computer security • Previous Articles Next Articles

Reachability analysis for attribute based user-role assignment model

REN Zhiyu¹,²,³,CHEN Xingyuan¹,²

1. Henan Province Key Laboratory of Information Security，Zhengzhou Henan 450004，China；
2. Information Engineering University，Zhengzhou Henan 450001，China；
3. State Key Laboratory of Mathematical Engineering and Advanced Computing，Zhengzhou Henan 450001，China

Received:2013-08-20 Revised:2013-10-24 Online:2014-03-01 Published:2014-02-01
Contact: REN Zhiyu

基于属性的用户-角色委派模型可达性分析

任志宇¹,²,³,陈性元¹,³

1. 河南省信息安全重点实验室，郑州 450004；
2. 数学工程与先进计算国家重点实验室，郑州 450001
3. 信息工程大学，郑州 450001;

通讯作者: 任志宇
作者简介:任志宇（1974-），女，河南汤阴人，博士研究生，主要研究方向：信息安全、访问控制、授权管理；陈性元（1964-），男，安徽无为人，教授，博士生导师，博士，主要研究方向：信息安全。
基金资助:
国家973重点基础研究发展计划;河南省科技创新人才计划项目

Abstract

Abstract: It is difficult to express diversity policy by traditional RBAC (Role-based Access Control) management model. In order to solve the problem, an Attribute based User-Role assignment (ABURA) model was proposed. Attributes were adopted as prerequisite conditions to provide richer semantics for RBAC management policy. In distributed systems, user-role reachability analysis is an important mechanism to verify the correctness of authorization management policy. The definition of user-role reachability analysis problem for ABURA model was given. According to the characteristics of state transition in ABURA model, some reduction theorems for policy were given. Based on these theorems, user-role reachability analysis algorithm was proposed, and the algorithm got verified through examples.

Key words: authorization management model, reachability analysis, attribute, role, user-role assignment

摘要： 针对传统基于角色的访问控制(RBAC)管理模型难以表达多样化策略的问题，提出了基于属性的用户-角色委派（ABURA）模型，采用属性作为用户-角色委派的先决条件，丰富了RBAC管理策略的语义。用户-角色可达性分析是验证分布式系统中授权管理策略正确性的重要机制，定义了ABURA模型的用户-角色可达性分析问题，通过分析ABURA模型状态转换特点给出策略约减定理，设计了可达性分析算法，并通过实例对算法进行了验证。

关键词: 授权管理模型, 可达性分析, 属性, 角色, 用户-角色委派

CLC Number:

TP393.08

REN Zhiyu CHEN Xingyuan. Reachability analysis for attribute based user-role assignment model[J]. Journal of Computer Applications, 2014, 34(2): 428-432.

任志宇陈性元. 基于属性的用户-角色委派模型可达性分析[J]. 计算机应用, 2014, 34(2): 428-432.

[1]	Xin LI, Qiao MENG, Junyi HUANGFU, Lingchen MENG. YOLOv5 multi-attribute classification based on separable label collaborative learning [J]. Journal of Computer Applications, 2024, 44(5): 1619-1628.
[2]	Gaimei GAO, Jin ZHANG, Chunxia LIU, Weichao DANG, Shangwang BAI. Privacy protection scheme for crowdsourced testing tasks based on blockchain and CP-ABE policy hiding [J]. Journal of Computer Applications, 2024, 44(3): 811-818.
[3]	Haifeng MA, Yuxia LI, Qingshui XUE, Jiahai YANG, Yongfu GAO. Attribute-based encryption scheme for blockchain privacy protection [J]. Journal of Computer Applications, 2024, 44(2): 485-489.
[4]	Jing LIANG, Wunan WAN, Shibin ZHANG, Jinquan ZHANG, Zhi QIN. Traceability storage model of charity system oriented to master-slave chain [J]. Journal of Computer Applications, 2024, 44(12): 3751-3758.
[5]	Keshuo SUN, Haiying GAO, Yang SONG. Multi-authority attribute-based encryption scheme for private blockchain over public blockchain [J]. Journal of Computer Applications, 2024, 44(12): 3699-3708.
[6]	Gaimei GAO, Mingbo DUAN, Yaling XUN, Chunxia LIU, Weichao DANG. SM9-based attribute-based searchable encryption scheme with cryptographic reverse firewall [J]. Journal of Computer Applications, 2024, 44(11): 3495-3502.
[7]	Huan ZHANG, Jingyu WANG, Lixin LIU, Xiaoyu JIANG. Multi-organization collaborative data sharing scheme with dual authorization [J]. Journal of Computer Applications, 2024, 44(10): 3307-3314.
[8]	Haiying MA, Jinzhou LI, Jikun YANG. Blockchain-based decentralized attribute-based encryption scheme for revocable attributes [J]. Journal of Computer Applications, 2023, 43(9): 2789-2797.
[9]	Jinghong WANG, Zhixia ZHOU, Hui WANG, Haokang LI. Attribute network representation learning with dual auto-encoder [J]. Journal of Computer Applications, 2023, 43(8): 2338-2344.
[10]	Jiaming HE, Jucheng YANG, Chao WU, Xiaoning YAN, Nenghua XU. Person re-identification method based on multi-modal graph convolutional neural network [J]. Journal of Computer Applications, 2023, 43(7): 2182-2189.
[11]	Meng CAO, Sunjie YU, Hui ZENG, Hongzhou SHI. Hierarchical access control and sharing system of medical data based on blockchain [J]. Journal of Computer Applications, 2023, 43(5): 1518-1526.
[12]	Jingchao CHEN, Shugong XU, Youdong DING. Text image editing method based on font and character attribute guidance [J]. Journal of Computer Applications, 2023, 43(5): 1416-1421.
[13]	Xiaoyan ZHANG, Jiayi WANG. Comparison of three-way concepts under attribute clustering [J]. Journal of Computer Applications, 2023, 43(5): 1336-1341.
[14]	Yuanjiang LI, Jinsheng QUAN, Yangyi TAN, Tian YANG. Attribute reduction for high-dimensional data based on bi-view of similarity and difference [J]. Journal of Computer Applications, 2023, 43(5): 1467-1472.
[15]	Shunhang CHENG, Zhihua LI, Tao WEI. Threat intelligence entity relation extraction method integrating bootstrapping and semantic role labeling [J]. Journal of Computer Applications, 2023, 43(5): 1445-1453.

Reachability analysis for attribute based user-role assignment model

基于属性的用户-角色委派模型可达性分析

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics