The Research And Application Of A New Role-Hierarchy Relation Model

Access control is one of the most important security technologies in present-day standard of security networks. In order to meet the security requirement of various domains, role-based access control which is a technology bearing no relation to strategy of control is put forward. Role-based access control uses roles as agencies. It will effectively resolve the questions of security and working efficiency in system management if a reasonable role-hierarchy relation is structured. The main task of this paper is to research into the problems of role-hierarchy relations based on basic model of role-hierarchy relations in RBAC. A new model is advanced to ulteriorly realize high-efficiency access control on network resourse.This paper uses a tree of roles to denote the true-life administrative structure. It defines the new concept of super-matrix on the base of matrix's character. A new super-matrix model for role-hierarchy relation is brought forward. This model includes two aspects of contexts. It can represent the essential information of every role and the inheritable relations between two roles in the tree of roles. On the other hand, a normalization description is given for basic operating including adding, deleting, appending and researching rules and arithmetic of roles in roles management. At the end, it is theoretically proved that the arithmetic is not only accurate but also how much the complicacy is. The article uses experiments and testing data to show the model can reduce the complicacy of system management, improve working efficiency, and have great advantages and practicability. The method and idea of this model provide some useful values and directive sense for managing systems based on RBAC in security.