一种改进的基于角色的授权委托模型  

An Authorization Delegation Model Based on User Security Levels

作　　者：孙翠翠[1] 张永胜[1] 

机构地区：[1]山东师范大学信息科学与工程学院,山东济南250014

出　　处：《计算机技术与发展》2010年第11期154-157,共4页Computer Technology and Development

基　　金：山东省自然科学基金(Y2008G22)

摘　　要：委托是访问控制模型中非常重要的组成部分,已成为分布式计算环境下重要的访问控制管理机制。提出了一种改进的基于角色的授权委托模型,此模型对用户的角色划分不仅仅基于用户的身份,还要考虑用户的信任度、能力等属性,通过综合多种因素对用户进行属性级别划分,不同的属性级别对应不同的角色从而对应不同的访问权限,以达到对用户进行访问控制的目的,是一种基于属性的角色授权委托模型。与传统基于身份划分的角色委托模型相比,此模型具有更细的访问控制粒度和更高的安全性。Delegation is a very important part of access control model and has become an important access control management mechanism under the distributed computing environment.An improved authorization delegation model based on user attribute is presented.Delegating role to users not only consider the user＇s position,but also the user＇s trustworthiness and ability and then make a user attribute levels,the different attribute levels correspond to different roles and thus correspond to different access permissions to control users＇ access.This model is an attribute-based role delegation model.Compared with the traditional authorization delegation model,this model has a fine-grained access control and higher security.

关 键 词：委托 授权 用户属性级别 角色 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]