A New Model of Describing Mutual Exclusion of Roles and Its Realization

The mutual exclusion of roles as an effective means of implementing separation of duty, has an important role on access control in RBAC systems. This paper deeply discusses the types that the mutual exclusion of roles come from, and puts forward a model of describing mutual exclusion of roles. The model is similar to the structure of adjacency multiple table, and its basic unit is the role structure which can describe the relations with other roles. The paper also explores the situation after the digestion of the mutual exclusion, and finally gives out a simple application.