Abstract: Role engineering focuses on the role mining and optimizing of Role-Based Access Control(RI3AC)，but it o- mils the scenario of complex information system(CIS) among those applications. The popular model for access control in CIS is RI3AC, where relations between roles are assumed to have been built by humans beforehand. However, building these relations is timcconsuming, even for experts. We introduced the role engineering into CIS, exploited concept lat- lice model and subject predicate-object method to generate roles and their corresponding hierarchical relations from the requirement information acquired from domains, and the costing is lower. In the end, our experimental results show that our algorithm is effective.

Key words: Concept lattice, Role engineering, Role acctuisition, Complex information system