Role access control method based on dynamic description logic

Abstract

The invention discloses a role access control method based on dynamic description logic. The method is characterized in that: on the original basis of role-based access, a concept of a role library is introduced, roles are formally divided into static roles and dynamic roles, an expanded role-based access control (ERBAC) model is adopted for access control, an access control method of the ERBAC model is described by using dynamic description logic SHOIQ-DL, an SHOIQ-DL ERBAC knowledge base is established, a constraint mechanism of the roles is processed by using a method for determining the consistency of the dynamic description logic, and the constraint mechanism can be automatically processed in the access process. By adoption of the model and the method provided by the invention, data can be protected during static access control or dynamic access control of an enterprise and a network, so that the data are safer. Moreover, the method takes the dynamic description logic as the logic base, may strictly depict and reason relative knowledge in a role access control system, further realize auto treatment to the role constraint on this basis.

Description

technical field [0001] The invention relates to the field of enterprise and network data information security, in particular to a method for controlling user access to resource rights, more specifically, a dynamic description logic-based role access control method. Background technique [0002] Access control (Access Control) is based on identity authentication, according to authorization to control the proposed resource access request. Access control is the main strategy for enterprise and network security prevention and protection. It can limit access to key resources and prevent damage caused by intrusion of illegal users or inadvertent operation of legitimate users. [0003] With the accelerated pace of enterprise informatization and the development of computer technology, Web-based information management systems have become the mainstream of information management system development, security issues have also become the focus of attention, and the management of user rig...

AI Technical Summary

Problems solved by technology

[0013] First, it simply introduces roles into the task flow, and does not have the advantages of inheriting RBAC's static authorization;

[0014] Second, because in the above model, permissions are granted to roles only when task instances are executed, and roles activated by users when they are not executing task instances do not have corresponding permissions, which makes the correspondence between roles and permissions very difficult. Difficult to determine;

[0015] Third, it does not deal with the problem of how to deal with the role constraints brought about by adding roles to the task flow. As a complete security system model, the constraint mechanism is very important, and how to deal with this mechanism is also particularly important

Various current methods have their limitations in specific application fields, and it is difficult to meet the needs of today's enterprises and networks for information security.

Images