RBAC Permission Consistency Static Analysis Framework

Role-Based Access Control (RBAC) is a mainstream access control method of software systems. After RBAC policies are formulated, there may be permission inconsistency between RBAC policies and practical execution paths. First, we defined the concept of RBAC permission consistency, and the concepts of execution path, Role Requirement array and Role Holding vector etc. On this basis, we proposed RBAC Permission Consistency Static Analysis Framework, proposed and proved permission consistency decision and Least Privilege principle decision theorems. This paper´s contributions include providing theoretical framework of RBAC permission consistency verification, and providing a methodology for decision of Least Privilege principle.