Verification and Analysis of Access Control Policy with Colored Petri Net

摘要：

A Trust and Context based Access Control model (TCAC)is proposed in this paper, which integrates trust value and context information of users into traditional role based access control. TCAC is flexible and dynamic to limit the authorizations to users. Verification and analysis of access control policy can help us understand the security requirements and states of systems. Colored Petri Net (CPN) extends the traditional Petri net, it can simply the net structure, and analyze the security and correctness of complicated systems before really constructing them. We present a CPN model of role activation/deactivation of TCAC policy, and discuss the color sets, places, arc expressions and guard functions in CPN model. The consistency of TCAc policy is verified based on CPN model and reachability analysis.

关键词： access control colored petri net verification

作者: Fujun Feng Junshan Li

作者单位: Dept. of Computer The Second Artillery Engineering College Xian,China Dept. of Computer The Second Artillery Engineering College Xian, China

会议类型: 国际会议

会议名称: The International Conference on Communication Software and Networks(2009 IEEE通信软件与网络国际会议 ICCSN 2009)

会议地点: 成都

会议语种:英文

页码: 610-614

在线出版日期: 2009-02-20（万方平台首次上网日期，不代表论文的发表时间）