A Dynamic Description Logic-Based Formalism for RBAC

Applications in the open and dynamic environment become more intelligent and complicated. To secure these applications is a big challenge. RBAC model, as a de facto standard in access control field, is widely used in many applications. But the lack of dynamic and formal method to describe RBAC makes the model can't completely adapt to the open and dynamic environment. To solve this problem, we introduce a three level RBAC model which unifies the administrative components, the administrative actions and the regular RBAC components, and also proposes a dynamic description logic, called DDL
_RBAC
, to formalize the three level model. Based on the formal description of RBAC with DDL
_RBAC
, an executable action decision algorithm to guarantee the dynamic consistency of systems is also presented.