Configuring RBAC to Simulate Bell Model

RBAC is powerful access control model which can be configured to enforce various traditional access control policies. Configurations of RBAC for enforcement of various mandatory and discretionary access policies are presented in the literature. However, many of these configurations are flawed. We observed that the errors are mainly due to the lack of a formal definition of correctness of configuration of access control model to simulate other access control models. In this paper, we focused on simulation of Bell Model, one of important extensions to BLP model. It is demonstrated that the first configuration for Bell Model is flawed, and the correction presented later is also flawed. We give a formal definition of correctness of configuration, and then the simulation for Bell model and the proof of its correctness are proposed.