支持否定授权的基于子角色的授权代理模型  

A SUB-ROLE BASED DELEGATION MODEL SUPPORTING NEGATIVE AUTHORIZATION

作　　者：刘月琴[1,2] 朱艳琴[1] 陈玉春[1] 

机构地区：[1]苏州大学计算机科学与技术学院,江苏苏州215006 [2]中国人民银行泰州市中心支行,江苏泰州225300

出　　处：《计算机应用与软件》2008年第11期80-82,共3页Computer Applications and Software

基　　金：江苏省自然科学基金项目(BK2004039)

摘　　要：提出了一种支持否定授权的基于子角色的授权代理模型SRBDM(Sub-role based Delegation Model)。该模型根据角色的继承和委托特性将角色分为若干个子角色,支持部分代理、权限级粒度代理和限制性继承,并对由于同时支持肯定和否定授权而产生的权限冲突问题提出了解决方法。In this paper it proposes a sub-role based delegation model （SRBDM） which supports negative authorization. It supports flexible delegation by dividing a role into sub-roles according to characteristics of permissions assigned to the role and considers delegation and inheritance simultaneously. It provides flexibilitv in authority management such as partial delegation, permission level delegation and restricted inheritance. In this paper it also provides an approach for the conflicting problem caused by adopting both positive and negative authorization at same time.

关 键 词：访问控制 授权代理 否定授权 冲突解决 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] F272.91[自动化与计算机技术—计算机科学与技术]