Position sensitive and role-based method, device and system for access control

Abstract

The invention provides a position-sensitive and role-based method, a device and a system for access control. An object space is divided into a plurality of position areas, each position area is provided with a corresponding position sensitive permission set; and users of the object space are divided into one or more roles and each role is mapped with one position area. The access control method comprises the following steps: acquiring the organizational relations among various roles and expressing position vectors of various position areas; analyzing covering relationships among the position areas based on the position vectors of the position areas so as establish the position partial order relationship; filtering a transfer covering relationship of the position partial order relationship so as to obtain a position adjacent relationship; adding role adjacent relationships in the organizational relationships among various roles into the position adjacent relationships so as to establish a role adjacent relationship; calculating the position-role partial order relationship based on the position-role adjacent relation; and determining whether to authorize the access of users referencing to the position-role partial order relationship.

Description

technical field [0001] The present invention relates to access control, and more particularly relates to a method, device and system for controlling access to target resources by using an automatically established location-sensitive and role-based access control model. Background technique [0002] With the popularity of location-based services (LBS), location-sensitive-role-based access control (LRBAC) has a good prospect in many applications such as confidential meetings, corporate information security, data security in financial institutions, and so on. [0003] A specific application (such as a communication network, a company, a hospital, etc.) usually involves various users, wherein these users can be grouped or classified according to their mutual relationship or the role that the user plays in the application. Roles usually have a hierarchical relationship and each role usually assumes different functional responsibilities, so each user may need to access specific re...

AI Technical Summary

Problems solved by technology

[0009] Because the role-location-permission in the LRBAC model is actually a three-dimensional mapping relationship, for large-scale location-based applications, the establishment process of the LRBAC model is complicated, not user-friendly, and extremely difficult

This makes access control based on this prior art LRBAC model costly and not user friendly

Images