Procedural Constraints in the Extended RBAC and the Coloured Petri Net Modeling

Formal methods help the development of secure systems by reducing ambiguities in security policy specifications and providing mathematical verification tools. By the formal verification, it is possible to confirm security related properties hold in a system. In this paper, we propose an interpretation of Coloured Petri Net(CPN) [1], [2] with security considerations for the formal specification of the Extended Role Based Access Control(E-RBAC). Petri Net(PN) has been widely used to model concurrent and asynchronous systems. CPN is a high level PN introducing type manipulation so that it describes a system and properties compactly. CPN is an efficient method to model the multi-user system in which the E-RBAC policy is enforced.