LIU Wei1, CAI Jia-yong1, HE Ye-ping1. Role-based fine-grained delegation constraint framework in collaborative environments[J]. 2008, (1): 83-91.DOI:
协同环境下基于角色的细粒度委托限制框架
摘要
提出了基于角色的细粒度委托限制框架
将角色分为对象角色和委托角色
实现细粒度的控制。分析了三类委托限制:时间限制、禁止限制和义务限制。针对不同类型定义相应限制规则
并用于描述条件委托和受控使用
条件委托要求满足条件后执行委托操作
防止非法扩散;受控使用约束委托权限
防止权限滥用。多个委托限制规则之间可能冲突
给出了时间复杂度为O(n2)的基于图论的一致性检测算法。
Abstract
A role-based delegation constraint method was introduced by separating role into two parts for fine-grained controlling. Three types of delegation constraints were analyzed
including temporal
prohibition and obligation. Using these constraints
conditional delegation and constrained usage was described. The former protected accepted delegation under certain conditions against diffuseness and abuse. The later constrained the usage of permission to avoid abuses of delegated permissions. An algorithm based on the graph theory for verifying the consistency of delegation constraints was presented