Specification of SA-RBAC Policy Based on Colored Petri Net

Author

Song, Mingqiu ; Pang, Zhiguo

Author_Institution

Inst. of Syst. Eng., Dalian Univ. of Technol., Dalian

Volume

3

fYear

2008

fDate

9-12 Dec. 2008

Firstpage

207

Lastpage

210

Abstract

Specification and verification of access control (AC) policies is a significant and challenging problem. Colored Petri net (CPN) is a powerful modeling and analyzing tool having the advantages of intuitive visual framework with the rigor and precision of a semantics founded on category theory. In this paper, a concrete specification of SA-RBAC policy on CPN is described in detail for our improved RBAC model SA-RBAC (self-authentication RBAC). And all the states in the CPN model describing SA-RBAC policy can be proved to be consistent.

Keywords

Petri nets; authorisation; category theory; formal specification; formal verification; graph colouring; message authentication; SA-RBAC policy; category theory; colored Petri net; formal specification; formal verification; role-based access control; self-authentication; Access control; Concrete; Information security; Intelligent agent; NIST; National security; Permission; Power engineering and energy; Power system modeling; Safety; Colored Petri Net; SA-RBAC; specification;

fLanguage

English

Publisher

ieee

Conference_Titel

Web Intelligence and Intelligent Agent Technology, 2008. WI-IAT '08. IEEE/WIC/ACM International Conference on

Conference_Location

Sydney, NSW

Print_ISBN

978-0-7695-3496-1

Type

conf

DOI

10.1109/WIIAT.2008.189

Filename

4740762