基于RBAC的灵活代理委托模型  

Flexible Agent delegation model based on RBAC

作　　者：孙伟[1] 王淑礼[1] 邬长安[1] 

机构地区：[1]信阳师范学院计算机与信息技术学院,河南信阳464000

出　　处：《计算机应用》2010年第7期1797-1801,共5页journal of Computer Applications

基　　金：国家自然科学基金资助项目(10671166);信阳师范学院青年科研基金资助项目(200951)

摘　　要：在现有基于RBAC的委托模型中,委托人由于出差或休假无法自主执行委托,然而完全依靠管理员集中式的授权管理,缺乏灵活性,且存在权限滥用的危险。结合RBAC模型,提出一种基于代理的灵活角色委托模型。给出了代理委托策略,并通过构造和规约两方法对模型的合理性与完备性进行了论证。理论分析与实例验证结果表明,该模型通过引入代理人,代表执行并对委托过程进行监督管理,能够有效地体现委托过程的灵活性,并且遵循"最小特权"和"职责分离"两安全原则。The existing delegation models based on Role-Based Access Control（RBAC） lack flexibility,and the permissions abuse may occur in case that delegators are on business or on leave,although the system administrator could accomplish delegation authorization by oneself instead of delegators.This paper presented an Agent-based flexible role delegation model based on RBAC.The delegation strategy was given and the soundness and the completeness of the model were discussed and proved by the construction and the reduction methods.The results analyzed by theories and actual examples show that,the third party（or same Agent） takes charge of delegating the permissions on behalf of the delegator and supervises the delegation authorization.Flexibility is effectively reflected in the delegation,and the model follows the two security principles： ＂least privilege＂ and ＂the separation of duty＂.

关 键 词：基于角色的访问控制 委托 代理 约束 安全性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]