Abstract—The risk problem of access control model is always the key point of security management. In this paper, we introduce the risk factor to control the risk of role under the proposed threshold when building RBAC policy based on role mining. At the same time, a user should meet some demands to activate roles. So we propose the following principal. A user could activate a role when his trust is higher than the trust threshold of the candidate role. This method makes role authority more reasonable and it avoids of the abuse of permissions. Experiments on performance indicate that the proposed algorithm can not only build the complete RBAC system to avoid roles’ high risk caused by the high complexity of permissions in roles, but also meet the least privilege when a user activates a role.

Index Terms—RBAC, role mining, role risk, user trust.

The authors are with the School of Computer Science and Engineering, Southeast University in Nanjing, Jiangsu Province, China.

Cite:Caiyuan Jin, Aodong Shen, Wenxue Yu, "The RBAC System Based on Role Risk and User Trust," International Journal of Computer and Communication Engineering vol. 5, no. 5, pp. 374-380, 2016.