The Separation of Duty with Privilege Calculus

TL;DR

This paper introduces Privilege Calculus, a novel knowledge representation method for Separation of Duty, aiming to enhance reconfigurability and traceability by linking SD structures to privilege structures.

Contribution

It proposes Privilege Calculus as a new approach to model and analyze Separation of Duty through privilege structures, improving system reconfigurability and traceability.

Findings

Privilege Calculus effectively models SD structures.

Enhanced reconfigurability of SD systems.

Improved traceability of system privileges.

Abstract

This paper presents Privilege Calculus (PC) as a new approach of knowledge representation for Separation of Duty (SD) in the view of process and intents to improve the reconfigurability and traceability of SD. PC presumes that the structure of SD should be reduced to the structure of privilege and then the regulation of system should be analyzed with the help of forms of privilege.