基于属性的扩展委托模型

叶春晓; 吴中福; 符云清; 钟  将; 冯  永

基于属性的扩展委托模型

1(重庆大学计算机学院重庆 400044) 2(重庆大学网络教育学院重庆 400044) (yecx@cqu.edu.cn)

计量
- 文章访问数: 662
- HTML全文浏览量: 0
- PDF下载量: 530
出版历程
- 发布日期: 2006-06-14

An Attribute-Based Extended Delegation Model

1(College of Computer Science, Chongqing University, Chongqing 400044) 2(College of Network Education, Chongqing University, Chongqing 400044)

摘要

摘要: 为提高委托过程的安全性，对现有委托模型进行了扩展，提出了一个更加安全的基于属性的扩展委托模型(ABDM\-A). ABDM\-A中的委托约束不但包括委托先决条件(CR)，还包含委托属性表达式(DAE).受托者必须同时满足委托先决条件和委托属性表达式才能被委托权限或角色.为保证委托过程的灵活性，ABDM\-A将委托属性表达式进一步分为永久和临时委托属性表达式，使得委托者可临时而不是永久地将某些高级权限委托给不具备资格的用户. ABDM\-A提高了委托过程的安全性，减轻了委托者和系统管理员的负担.
- 信息安全 /
- 访问控制 /
- 委托 /
- 属性
Abstract: To increase the security of delegation, an attribute-based delegation model called ABDM\-A is presented, which is an extension of current delegation models. Delegation constraint in ABDM\-A consists of both delegation attribute expression (DAE) and delegation prerequisite condition (CR). Delegatees must satisfy delegation constraint (especially DAE) when assigned to a delegation role. For a better flexibility, delegation attribute expression is divided into two types: permanent and temporary delegation attribute expressions. With temporary delegation attribute expression, the delegator can temporarily, not permanently, delegate high level permission to low level delegatees. ABDM\-A relieves the security management effort of the delegator and the system administrator in delegation and increases the security of delegation.
- information security /
- access control /
- delegation /
- attribute