• 제목/요약/키워드: Control of separation

검색결과 1,027건 처리시간 0.03초

역할기반 접근제어 환경에서 접근권한 기반의 임무분리 모델 (Permission-Based Separation of Duty Model on Role-Based Access Control)

  • 오세종
    • 정보처리학회논문지C
    • /
    • 제11C권6호
    • /
    • pp.725-730
    • /
    • 2004
  • 임무분리(Separation of Duty) 정책은 위임(Delegation)과 더불어 접근제어 분야에서 중요한 보안 원리중의 하나이다. 기업과 같은 대규모 조직 혹은 정보 시스템에 적합한 것으로 알려진 역할기반 접근제어(RBAC) 모델에서도 역할들간의 임무분리를 지원하는데, 임무분리와 역할계층의 개념사이에서 상호 모순이 발생하고 임무분리와 상관없는 권한들도 제약을 받을 가능성이 있으며, 위임에 의해 임무분리가 침해받을 수 있는 문제점이 있다. 본 논문에서는 역할기반 접근제어 환경에서 접근권한(Permission) 수준의 임무분리 모델을 제안한다. 제안된 모델에서는 임무분리를 역할들 사이에 시정하는 대신 접근권한들의 집합으로 정의하고 역할 활성화 규칙에 의한 권한 활성화 방법을 적용함으로써 기존의 모델의 문제를 해결하고 임무 분리 정책의 구현을 용이하게 하였다.

Enhanced Role-Based Access Control Administration Tool

  • Yenmunkong, Burin;Sathitwiriyawong, Chanboon
    • 제어로봇시스템학회:학술대회논문집
    • /
    • 제어로봇시스템학회 2004년도 ICCAS
    • /
    • pp.1360-1364
    • /
    • 2004
  • This paper propose an extended model for role-permission assignment based on locations called "Enhanced Role-Based Access Control (ERBAC03)". The proposed model is built upon the well-known RBAC model. Assigning permissions to role is considered too complex activity to accomplish directly. Instead we advocate breaking down this process into a number of steps. The concept of jobs and tasks is specifically introduced to facilitate role-permission assignment into a series of smaller steps. This model is suitable for any large organization that has many branches. Each branch consists of many users who work in difference roles. An administration tool has been developed to assist administrators with the administration of separation of duty requirements. It demonstrates how the specification of static requirements can be done based on "conflicting entities" paradigm. Static separation of duty requirements must be enforced in the administration environment. Finally, we illustrate how the ERBAC03 prototype is used to administer the separation of duty requirements.

  • PDF

블로잉 제트에 의한 에어포일에서의 유동박리 제어효과 (Flow Separation Control Effects of Blowing Jet on an Airfoil)

  • 이기영;정형석;조동현;손명환
    • 한국항공우주학회지
    • /
    • 제35권12호
    • /
    • pp.1059-1066
    • /
    • 2007
  • 타원형 단면 에어포일의 블로잉 제트에 의한 유동박리 제어효과에 대한 연구를 레이놀즈수 Rec=7.84×105에서 실험적 방법으로 수행하였다. 블로잉 제트는 에어포일 내부의 공기실에 있는 압축공기를 앞전 혹은 뒷전에 위치한 좁은 제트슬롯을 통하여 분출시켰다. 실험결과 블로잉은 날개면 압력회복으로 수직력을 증가시킴으로써 박리 유동을 제어할 수 있음을 보였다. 블로잉에 의한 수직력의 상승은 상대적으로 높은 받음각에서 더욱 효과가 컸으며 낮은 받음각에서는 감소되었다. 현 연구조건에서 수직력을 상승시키는데 가장 효과적인 블로잉 방식은 앞전에서의 90° 방향의 간헐제트이었다. 특히, 간헐제트가 부여된 경우 실속 받음각을 약 2°-3° 지연시킬 수 있었다. 연속제트와 간헐제트 모두 에어포일의 공력특성과 성능을 향상시킴으로써 유동박리 제어에 직접적이고 유효한 방법임을 입증하였다.

터미널 공역의 수용능력 계산 모형 (Capacity Model for Terminal Control Area)

  • 양한모;김병종
    • 대한교통학회지
    • /
    • 제12권3호
    • /
    • pp.15-27
    • /
    • 1994
  • A mathematical model and its solution algorithm are proposed for computing the capacity of terminal control area. The model is built based on dynamics of aircraft flying on pre-established approach path and its solution algorithm employs a numerical method. The model computes the minimum separation of two aircraft at the entry fix of the terminal control area, which assures that air traffic separation rules are not violated during the approach phase, thereby computes the capacity. The model might be applied for designing approach paths for a new airport, for rearranging paths of an existing airport or establishing approach control procedures.

  • PDF

모세관 전기영동 분석법의 복합약물제제의 품질관리 분석에 응용을 위한 연구 (Application of Capillary Electrophoresis for Quality Control Analysis of Complex Medicine)

  • 허유정;이공주
    • 약학회지
    • /
    • 제41권5호
    • /
    • pp.539-546
    • /
    • 1997
  • Capillary electrophoresis (CE) is perceived as an attractive tool for the analysis of pharmaceuticals and biological materials because of their high separation efficiency, easy separation and low running cost. New concept of micellar electrokinetic capillary chromatography (MECC) expanded the application of CE to the separation of neutral molecules. Validation of CE as an analytical technique for quality control of pharmaceuticals should be confirmed by quantitative analysis and the peak confirmation. In this study, the quantitative analyses of various types of neutral, acidic and basic components (acetaminophen, caffeine, ascorbic acid, riboflavin, thiamine, chlorpheniramine, phenylpropanolamine, dl-methylephedrine and dextromethorphan) in complex cold medicines have been accomplished using CE. Combined methods of MECC using SDS and capillary zone electrophoresis lowering the pH of running buffer were adopted to determine the ingredients in capsule type or liquid formula complex medicines without particular sample pretreatment. The results indicate that CE is a promising technique for quality control analysis of pharmaceuticals as a validation method.

  • PDF

수동제어 장치를 이용한 3 차원 자동차 모형의 항력감소 (Drag Reduction of a Three-Dimensional Car Model Using Passive Control Device)

  • 이욱;사공웅;최해천
    • 대한기계학회:학술대회논문집
    • /
    • 대한기계학회 2007년도 춘계학술대회B
    • /
    • pp.2868-2872
    • /
    • 2007
  • In this study, a passive control using a boat-tail device is conducted for a three-dimensional car model in ground proximity. We consider various boat-tails and investigate the mechanism of drag reduction by them. By varying the length and slant angle of boat-tail, we obtain drag reductions up to 40%. From the oil-surface flow visualization and hot-wire measurement, the drag reduction by the boat-tail is characterized by the shear-layer instability and reattachment on the boat-tail, forming a small separation bubble at the upstream part of boat-tail surface, resulting in the delay of main separation and drag reduction. At high slant angles, the flow fully separates and drag is nearly same as that of no control.

  • PDF

Magnetic Force Control Technique for Recycling and Environmental Preservation

  • Nishijima, Shigheiro
    • 한국초전도ㆍ저온공학회논문지
    • /
    • 제14권4호
    • /
    • pp.1-4
    • /
    • 2012
  • The applicability of the two types of magnetic separation system, high gradient magnetic separation (HGMS) and Magneto Archimedes method were studied considering the magnetic susceptibility of targeted substances. It was noted that the combination of the two methods can control the almost all the substances, paramagnetic and diamagnetic in addition to ferromagnetic substances. The principle of the methods was given and the conceput of the magnet force control technology is discussed. The practical applications of the technique were introduced together with the new application of HGMS.

An Enhanced Role-Based Access Control Model using Static Separation of Duty Concept

  • Yenmunkong, Burin;Sathitwiriyawong, Chanboon
    • 제어로봇시스템학회:학술대회논문집
    • /
    • 제어로봇시스템학회 2004년도 ICCAS
    • /
    • pp.1350-1354
    • /
    • 2004
  • This paper proposes a simple but practically useful model for preventing fraud of users called "ERBAC03". The new model consists of qualified mandatory and discretionary features for roles and locations, including the assignment of permissions for the appropriate roles and the assignment of roles for the appropriate locations. Moreover, a static separation of duty (SSoD) principle is applied to the new model for integrity requirements of security systems. The paper also explores some extensions of ERBAC03 including the new model using the SSoD concept from some experiments. The experimental results prove the efficiency improvement of the proposed model that can make benefits for large enterprises.

  • PDF

최소 권한 계정 분리 모델을 이용한 데이터베이스 엑세스 제어 연구 (A Study on Database Access Control using Least-Privilege Account Separation Model)

  • 장영수
    • 디지털산업정보학회논문지
    • /
    • 제15권3호
    • /
    • pp.101-109
    • /
    • 2019
  • In addition to enabling access, database accounts play a protective role by defending the database from external attacks. However, because only a single account is used in the database, the account becomes the subject of vulnerability attacks. This common practice is due to the lack of database support, large numbers of users, and row-based database permissions. Therefore if the logic of the application is wrong or vulnerable, there is a risk of exposing the entire database. In this paper, we propose a Least-Privilege Account Separation Model (LPASM) that serves as an information guardian to protect the database from attacks. We separate database accounts depending on the role of application services. This model can protect the database from malicious attacks and prevent damage caused by privilege escalation by an attacker. We classify the account control policies into four categories and propose detailed roles and operating plans for each account.

합성제트를 이용한 타원형 익형 유동제어 (FLOW CONTROL ON ELLIPTIC AIRFOILS USING SYNTHETIC JET)

  • 김성훈;김철완
    • 한국전산유체공학회지
    • /
    • 제15권4호
    • /
    • pp.46-52
    • /
    • 2010
  • In the present work, the aerodynamic characteristics of elliptic airfoils which have a 12% thickness ratio are numerically investigated based on Reynolds-averaged Navier-Stokes equations and a transition SST model at a Reynolds number 8.0$\times$105. The numerical simulation of a synthetic jet actuator which is a well-known zero-net-mass active flow control actuator located at x/c = 0.00025, was performed to control massive flow separation around the leading edge of the elliptic airfoils. Four cases of non-dimensional frequencies were simulated at an angle of attack of 12 degree. It is found that the size of the vortex induced by synthetic jets was getting smaller as the jet frequency becomes higher. Comparison of the location of synthetic jets between x/c = 0.00025 (around the leading edge) and x/c = 0.9 (near the separation) shows that the control near the leading edge induces closed recirculation flow regions caused by the interaction of the synthetic jet with the external flow, but the control applied at 0.9c (near the trailing edge) induces a very small and weak vortex which quickly decays due to weak intensity.