A Dynamic Description Logic-Based Formalism for RBAC

Applications in the open and dynamic environment become more intelligent and complicated. To secure these applications is a big challenge. RBAC model, as a de facto standard in access control field, is widely used in many applications. But the lack of dynamic and formal method to describe RBAC makes the model can´t completely adapt to the open and dynamic environment. To solve this problem, we introduce a three level RBAC model which unifies the administrative components, the administrative actions and the regular RBAC components, and also proposes a dynamic description logic, called DDL_RBAC, to formalize the three level model. Based on the formal description of RBAC with DDL_RBAC, an executable action decision algorithm to guarantee the dynamic consistency of systems is also presented.