基于授权步数和角色差度的转授权模型  

Delegation Model Based on Delegation Depth and Role Range

作　　者：钟卫[1] 舒坚[1] 杨丰玉[1] 刘琳岚[1] 

机构地区：[1]南昌航空大学计算机学院,南昌330063

出　　处：《计算机工程》2010年第1期136-138,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(60773055)

摘　　要：转授权技术能解决分布式环境下的用户授权问题,但在多步转授过程中可能引发循环授权和权限扩散。研究任务-角色访问控制(TRBAC)模型,提出基于授权步数和角色差度的工作流转授权(DR-TRBAC)模型,根据同一任务的转授关系构建转授权树,通过限定授权步数和遍历转授权树解决循环授权问题,设置转授用户间最大角色差度防止权限的扩散。应用实例证明了DR-TRBAC模型的实用性。The delegation technology can solve the authorization problem of users in distributed environment, which makes the permission management flexible. However, it is possible to cause the issues of cycle authorization and permission diffusion in the process of multi-step delegation. On the basis of T-RBAC, the paper proposes a DR-TRBAC model based on .delegation depth and role range. It creates delegation tree according to delegation relationship of one task. The cycle authorization problem is solved by limiting delegation depth. The permission diffusion is controlled by setting the maximum of role range between users. The feasibility of DR-TRBAC is proved through an application.

关 键 词：转授权模型 授权步数 角色差度 

分 类 号：N945.12[自然科学总论—系统科学]