RBAC Constraints Specification and Enforcement in Extended XACML

摘要：

Constraints are considered to be the principal motivation for RBAC model. XACML profile for RBAC can not meet the need of expressing static and dynamic RBAC constraints well. We give the XACML syntax of common static and dynamic Separation of Duty constraints and cardinality constraints of RBAC. We also complement Role Enablement Authority to extend this profile in order to enforce these constraints.

关键词： XACML RBAC Constraints

作者: Nurmamat Helil Kaysar Rahman

作者单位: College of Mathematics and System Sciences Xinjiang University Urumqi, China College of Mathematics and System Sciences; School of Mechanical Engineering Xinjiang University Uru

会议类型: 国际会议

会议名称: 2010年IEEE多媒体信息网络与安全国际会议

会议地点: 南京

会议语种:英文

页码: 546-550

在线出版日期: 2010-11-01（万方平台首次上网日期，不代表论文的发表时间）