Safety and Availability Checking for User Authorization Queries in RBAC

DOI

10.1080/18756891.2012.733216How to use a DOI?

Keywords

safety, availability, authorization, separation-of-duty

Abstract

This paper introduces the notion of safety and availability checking for user authorization query processing, and develop a recursive algorithm use the ideas from backtracking-based search techniques to search for the optimal solution. For the availability checking, we introduce the notion of max activatable set (MAS), and show formally how MAS can be determined in a hybrid role hierarchy. For the safety checking, we give a formal definition of dynamic separation-of-duty (DSoD) policies, and show how to reduce the safety checking for DSoD to a SAT instance.

Copyright

© 2017, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - JOUR
AU  - Jian-feng Lu
AU  - Jian-min Han
AU  - Wei Chen
AU  - Jin-Wei Hu
PY  - 2012
DA  - 2012/09/01
TI  - Safety and Availability Checking for User Authorization Queries in RBAC
JO  - International Journal of Computational Intelligence Systems
SP  - 860
EP  - 867
VL  - 5
IS  - 5
SN  - 1875-6883
UR  - https://doi.org/10.1080/18756891.2012.733216
DO  - 10.1080/18756891.2012.733216
ID  - Lu2012
ER  -