Abstract:

Role-based access control (RBAC) introduced the concept of role to improve the assignment and management of privilege. RBAC is a secure, effective method of access control. The constraints model is an important one of the standard models of international committee for information technology standard (INCITS). After introducing the standard models of RBAC, the mechanism of static constraints is extended by introducing the static cardinality constraints and static privilege constraints. These constraints are formalized defined, and the system and administrative functional specification are extended to support the new constraints. The extended constraints will enhance the management of authority and the practicability, reliability of RBAC system.

Key words: role-based access control, role, constraints；privilege