一种灵活的基于权限划分的授权代理模型  

A Flexible Delegation Model Based on Permissions Division

作　　者：马皓[1] 刘淑芬[1] 姚志林[1] 方勇[1] 

机构地区：[1]吉林大学计算机科学与技术学院,长春130012

出　　处：《吉林大学学报（理学版）》2010年第5期799-804,共6页Journal of Jilin University:Science Edition

基　　金：国家自然科学基金(批准号:60973041);国家高技术研究发展计划863项目基金(批准号:2009AA010314);吉林省科技发展计划重大项目(批准号:20076004)

摘　　要：针对传统授权代理模型灵活性较低、结构复杂等问题,在基于权限代理模型的基础上,提出一种改进的授权代理模型灵活的基于权限划分的授权代理模型.该模型使用划分权限方法代替划分角色,将所有权限划分为3个集合:可代理权限集、半可代理权限集和不可代理权限集,实现了特定权限代理并简化了模型结构.实验结果表明,该模型在保证系统安全性的同时,使授权代理的实现和管理更简单、灵活。In view of the problem of low flexibility and complex structure of traditional delegation models,this paper introduces an improved delegation model named flexible delegation model based on permissions division,which is built on permission-based delegation model.Instead of dividing roles,the permissions are divided into three sets in this model,which include delegable permission,semi-delegable permission and un-delegable permission.It realizes special permissions delegation and simplifies the structure of the model.The results show that this model makes the realization and management of the delegation more easy and flexible,at the same time it ensures the security of the system.

关 键 词：权限划分 授权代理 角色 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]