Study On A Temporal Role-Based Access Control Model And Its Application

With the development of Internet application, the demands tor security of network keep increasing. Access control is one of the important techniques to avoid unauthorized accesses. Traditional access control models have limitations, but role-based access control model can effectively overcome the limitations, simplify the complexity, reduce the management cost of authorized access, and provide a safer access control strategy. Authorized constraints are a group of restricting rules, while temporal constraints are used to denote the dependent relationship between temporal variation and role access. Temporal-RBAC (TRBAC) is an extension of the RBAC model. TRBAC supports periodic roles in enabling and disabling states by periodic event handler expressed by means of role triggers.Because the account management system of campus network has not temporal constraints, its account numbers are easily attacked and embezzled during some periods. This paper developed a project on the account management system of campus network based on TRBAC: firstly constructing a frame of access control to describe the TRBAC system operated in DBMS; secondly depicting the role triggers by combining with DBMS system; and finally designing the system role table. This scheme can avoid the network attacks and embezzlements and solve the problems of campus network security through temporal constraints.