TRBAC

摘要: Role-based access control (RBAC) models are receiving increasing attention as a generalized approach to control. Roles may be available users at certain time periods, and unavailable others. Moreover, there can temporal dependencies among roles. To tackle such dynamic aspects, we introduce Temporal-RBAC (TRBAC), an extension of the RBAC model. TRBAC supports periodic role enabling disabling---possibly with individual exceptions for particular users---and actions, expressed by means triggers. Role trigger actions either immediately executed, or deferred explicitly specified amount time. Enabling disabling given priority, which is used solve conflicting actions. A formal semantics specification language provided, polynomial safeness check introduced reject ambiguous inconsistent specifications. Finally, system implementing on top conventional DBMS presented.