An Extended Role-based Access Controls Model: Temporal, Spatial, Workflowed and Attributed Role-based Access Controls Model

摘要

According to the respective advantages of RBAC model and UCON model, Subject, Object, Role, Permission and Operation are all regarded as the instance of the class with attributes and methods on object-oriented programming, role-based access control model with the constraints of Temporal, spatial, attribute and workflow (TSAW-RBAC model) is proposed, the Observer Entity is introduced that assigns the operations to the Object according to the attributes of the Object and the Supervisor Entity is introduced that assigns the roles to the user according to the attributes of the user. It Can implement access control based on temporal and spatial constraints in the distributed computing environment, can implement user’s role-assign automatically based on Subject’s attributes and object’s attributes, can implement workflow based on the constraints of Subject’s attributes and object’s attributes, can implement the Digital Rights Management(DRM) and Trust Management.