An Improved Static Constraint RBAC Model

Multiple-session SoD problem is addressed in the static constraint RBAC model. An improved formal static constraint RBAC model is proposed and it will check the change of the UA relation to decide whether the union of the user's role set will satisfy the MER constraint during an administrative session. If it will not satisfy the constraint, some necessary withdrawing will be performed. The improved model conserves the advantage of the MER mechanism and handles multiple-session SoD problem efficiently.