基于时限的角色授权委托模型  

Timing constraints-based RBAC delegation model

作　　者：道炜[1] 汤庸[1] 

机构地区：[1]中山大学协同软件研究开发中心

出　　处：《计算机集成制造系统》2008年第8期1533-1538,共6页Computer Integrated Manufacturing Systems

基　　金：国家自然科学基金资助项目(60673135,60373081,60736020);广东省自然科学基金资助项目(7003721,04105503);教育部新世纪优秀人才支持计划资助项目(NCET-04-0805)~~

摘　　要：为实施用户到用户的委托,在RBDM0和RDM2000的基础上,提出了具有时间限制的角色访问控制授权委托模型。该模型使用日历时间和区间时间表示时间周期,描述了角色委托授权的周期时间约束。在此基础上,将授权过程的时间约束分为有效管理使能时间和使用使能时间,分析了时限约束对授权状态的影响,模型特别在授权链中综合考虑了角色自身激活的时限和作用于授权过程的时限,完整描述了时限委托授权模型,并给出了相应的委托判断规则,最后对模型的安全性方面进行了验证。To implement proxy from client to client, based on the RBDM0 and RDM2000, a Role-Based Access Control （RBAC） proxy authorization model with timing constraints was presented. It expressed periodic time by calendar time and interval time, and described the periodic time constraint in role proxy. Then, the time constraint was divided into effective management time and utilization time. Influence on authorization state exerted by time constraints was analyzed. The timing constraints of role activation and authorization procedure were particularly considered. The timing constraints-based authorization model was depicted thoroughly and corresponding judgment rules were also provided. Finally, the security of this model was verified.

关 键 词：基于角色的访问控制 委托授权 时限 角色激活 数学模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]