¹Shanghai University of Engineering Science/ College of Electronic and Electrical Engineering, Shanghai, China
²Lawrence Technological University/ Department of Mathematics and Computer Science, Southfield, USA

---

Abstract—RBAC(Role-Based Access Control) is an efficient and safe role_based access control mechanism. Separation Of Duty (SOD) is one of the most expected characteristics of RBAC system and also is one of the main characteristics of secure system. This paper presents SOD’s attributes of RBAC model by formal specification and their relations by state graph. This paper also explains a program for implementing SOD constraint in MIS by relationship between tables.

Index Terms—Role-Based Access Control(RBAC), formal specification, Separation Of Duty (SOD), Security, constraint

[PDF]

Cite: Su Yu Jon and J. Brewster, "Formal Specification and Impementation of RBAC Model with SOD," Journal of Software vol. 7, no. 4, pp. 870-877, 2012.