IDEAS home Printed from https://ideas.repec.org/a/gam/jmathe/v11y2023i14p3047-d1190445.html
   My bibliography  Save this article

Role Minimization Optimization Algorithm Based on Concept Lattice Factor

Author

Listed:
  • Tao Wang

    (Department of Computer Science and Technology, Shaoxing University, Shaoxing 312000, China)

  • Qiang Wu

    (Department of Computer Science and Technology, Shaoxing University, Shaoxing 312000, China)

Abstract

Role-based access control (RBAC) is a widely adopted security model that provides a flexible and scalable approach for managing permissions in various domains. One of the critical challenges in RBAC is the efficient assignment of roles to users while minimizing the number of roles involved. This article presents a novel role minimization optimization algorithm (RMOA) based on the concept lattice factor to address this challenge. The proposed RMOA leverages the concept lattice, a mathematical structure derived from formal concept analysis, to model and analyze the relationships between roles, permissions, and users in an RBAC system. By representing the RBAC system as a concept lattice, the algorithm captures the inherent hierarchy and dependencies among roles and identifies the optimal role assignment configuration. The RMOA operates in two phases: the first phase focuses on constructing the concept lattice from the RBAC system’s role–permission–user relations, while the second phase performs an optimization process to minimize the number of roles required for the access control. It determines the concept lattice factor using the concept lattice interval to discover the minimum set of roles. The optimization process considers both the user–role assignments and the permission–role assignments, ensuring that access requirements are met while reducing role proliferation. Experimental evaluations conducted on diverse RBAC datasets demonstrate the effectiveness of the proposed algorithm. The RMOA achieves significant reductions in the number of roles compared to existing role minimization approaches, while preserving the required access permissions for users. The algorithm’s efficiency is also validated by its ability to handle large-scale RBAC systems within reasonable computational time.

Suggested Citation

  • Tao Wang & Qiang Wu, 2023. "Role Minimization Optimization Algorithm Based on Concept Lattice Factor," Mathematics, MDPI, vol. 11(14), pages 1-13, July.
  • Handle: RePEc:gam:jmathe:v:11:y:2023:i:14:p:3047-:d:1190445
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/2227-7390/11/14/3047/pdf
    Download Restriction: no

    File URL: https://www.mdpi.com/2227-7390/11/14/3047/
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Hejiao Huang & Feng Shang & Jinling Liu & Hongwei Du, 2015. "Handling least privilege problem and role mining in RBAC," Journal of Combinatorial Optimization, Springer, vol. 30(1), pages 63-86, July.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Wei Sun & Shiwei Wei & Huaping Guo & Hongbing Liu, 2019. "Role-Mining Optimization with Separation-of-Duty Constraints and Security Detections for Authorizations," Future Internet, MDPI, vol. 11(9), pages 1-21, September.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jmathe:v:11:y:2023:i:14:p:3047-:d:1190445. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.