关键词: RB-RBAC 描述逻辑 授权规则 策略冲突 冲突检测

Abstract: RB-RBAC（Rule-Based RBAC）provides the mechanism to dynamically assign users to roles based on a finite set of authorization rules defined by the enterprisers security policy. These rules may have conflict due to negative authorization. We propose a formali

Key words: RB-RBAC, Description logic, Authorization rule, Policy conflict, Conflict detection