An authorization model of quantitative analysis of the least privilege

LP (Leaset Privilege) is one of the key principles of the RBAC model.It means that only the minimum collection of permissions can be granted the user to complete the specified task in order to prevent potential security threats caused by excess privileges. Recently most authorization mechanisms for granting permissions by least privilege are based on professional experience in specific fields. However, with the increasing number of roles, users and process of authorization, this become a heavy burden to the administrator and also the reliability and accuracy are not guaranteed. This paper presents an authorization model of quantitative analysis of the least privilege.The model authorizes users permissions by different weights according to the importance of these permissions.At the same time, the concept of least privilege will be expressed in formal methods, combined with the improved algorithm which proves the correctness and validity of the model.