智能与分布计算实验室

RBAC-Based Secure Interoperation Using Constraint Logic Programming

出版社:
  • 会议名称:The 2009 IEEE/IFIP International Symposium on Trusted Computing and Communications (TrustCom 2009)
  • 举办地点:Vancouver,Canada
  • 举办日期:August 29-31, 2009
  • 页数:867-872
摘要内容:

Secure interoperation is an increasingly important issue forlarge-scale enterprise applications. In this paper, we investigate, through constraint logic programming (CLP), secure interoperation in collaborating environments which employ Role-Based Access Control (RBAC) policies. In particular, we propose two types of interoperation, permission-based and the role-based secure interoperation, both formulated in CLP. Since a wide range of conflicts that may arise during interoperation, we also present corresponding rules for conflict resolution. By allowing permission-based and role-based interoperation, our framework enables flexible secure interoperation configuration. The proposed permission-based and the role-based secure interoperation are a pair of complementary approaches. With specification of secure interoperation in CLP, formal analysis and reasoning can be performed on RBAC-based secure interoperation.

关键词:
  • secure interoperation; RBAC;constraint logic programming