Abstract: Based on the analysis of time-constraint role-based access control model, the problems of choosing the turn time point and security status recovery are explained, and the algorithms of choosing the turn time point which can judge the system security status in TRBAC and choosing the reasonable teminating session set which will restore the system are proposed. Therefore, the algorithm solves the conflict, to some extent, between efficiency and security caused by when the turn time point choosing is too big or too small.

Key words: Role, Turn time point, Time-constraint, Security status recovery

摘要： 在分析具有时间约束特性的角色访问控制模型(TRBAC)的基础上，对其中翻转点选择和安全状态恢复问题进行了阐述，提出了在TRBAC中判断系统安全状态的翻转点选择算法，选择合理的终止会话集合使系统恢复到安全状态的算法。该算法在一定程度上解决了翻转时间点选择过大或过小引起的效率和安全冲突的问题。

关键词: 角色, 翻转点, 时间约束, 安全状态恢复

CLC Number: 

• TP309