Extended RBAC model for multilevel relational database
Zhong Chang-le · Computer Engineering and Applications Journal · 2010
An extended model of role based access control is proposed,which introduces classified policy into standard RBAC.The model erases the downward information flow by extended rules of read and write and some authorization constraints,and keeps the expressive power and flexibility of the standard RBAC by semantics of separation of category relations and session classes.The model can be used in the information systems that need not only the MAC to control the information flow but also the flexibility of the RABC.After a formal definition of the model,the implementation rules,access decision policies,management of authorization distribution,implement mechanism in multilevel relational database,BNF notations and application of the model are also discussed.