中文摘要：

策略安全分析是访问控制系统保持安全状态的重要机制．针对具有角色继承层次和角色静态互斥特征的分布式访问控制系统，文中采用智能规划技术进行策略安全分析．首先，提出了策略安全分析问题向规划问题转换的整体思路，定义“虚动作”模型以描述角色继承关系，使用领域互斥表述静态互斥角色，引入领域公理处理ARBAC策略的开放世界假设问题和前提条件中的负谓词问题．其后，运用图规划（Graphplan）算法求解转换而来的规划问题，重点分析了领域公理对规划图中部分NooP动作的剪枝作用，提出了领域公理在规划图扩展阶段的应用方式以及据此改进的图规划算法，介绍了已开发的面向ARBAC策略安全分析实验型规划系统．最后，进行了应用示例说明．

英文摘要：

Safety analysis is the prerequisite mechanism for distributed access control system. Graphplan theory was imported to perform safety analysis on those access control system which support role hierarchy and Static Mutual Exclusion Roles （SMER）. A complete resolution for the reachability problems, a principal safety analysis problem, is planned and designed. Firstly, a description model using planning language is set up, virtual action is put forward to express the inheritance relation between roles, and SMERs is transformed to domain constraints. Secondly, to settle the negative predicate problem and open world assumption problem, domain axiom is employed. Then the Graphplan arithmetic is modified by trimming ＇NooP＇ actions and relative predicates from plan graph using those axioms. Based on the amended arithmetic, the corresponding experiment system is developed. At last, a application ease of the analysis process is illustrated.