Usage Control Authorization Model for Database Based on Role and Task
Long Bo-tao · 2012
On the basis of usage control(UCON)model, the idea of the role and task management is adopted. A database usage control model named RTB-UCON with constraint extended, is constructed based on role and task. According to the judgment of authorization rule, obligation, condition and constraint, before usage, during usage or after usage, the usage decision can be made or updated, and attributes of subjects and/or objects are allowed to vary, which settle the problems of continuity of decisions and mutability of attributes. Role is employed to realize the flexibility of user management and the task is used to manage the permissions dynamically. Moreover, the role conflict and task conflict are avoided by constraint. At last, analysis of an application is provided to proof the feasibility of RTB-UCON.