Role mining optimization modeling method meeting user role-usage cardinality constraint

Abstract

The invention discloses a role mining optimization modeling method meeting a user role-usage cardinality constraint. It is assumed that q candidate roles R1, R2, ..., Rq exist, and a set of all the candidate roles also can be represented as R by a matrix; meanwhile, a new Boolean marking variable set {d1, d2, ..., dq} is defined, and when dj is equal to 1, the role j appears; otherwise, the role jdoes not appear; consequently, a formula defined in the specification is workable; when dj is equal to 1, at least one value {c1j, c2j, ..., cnj} is 1, namely, at least one user has the role j, wherein Vj:dj is greater than or equal to dij, and i is greater than or equal to 1 and less than or equal to n; by loosening an integrity constraint in a first problem, a better role result can be mined probably, which is an original intention of research on a second problem; and for modeling the problem, a slack variable x'it is introduced, and under the condition of not exceeding a threshold delta, matrix reconstruction is acceptable.

Description

technical field [0001] The invention belongs to the technical field of access control mechanisms, and relates to a role mining optimization modeling method satisfying user assignment potential constraints. Background technique [0002] RBAC is considered to be one of the current mainstream access control mechanisms, and its main advantages include facilitating authorization distribution and reducing the burden of system management. In order to reflect these characteristics, enterprise organizations need to convert traditional access control systems into RBAC systems. To do this, first define a good character set. Although the problem of role definition seems simple, it is considered a costly stage in the process of implementing RBAC, posing great challenges to system builders, because they have little knowledge of the semantic information of user roles and business processes in the enterprise . [0003] The concept of role engineering was proposed by Coyne in 1995, with t...

AI Technical Summary

Problems solved by technology

Potential problems of this method in the process of mining roles: lack of uniform standards for evaluating the quality of character sets

However, little research has been done to improve the end-user experience

Images