基于映射机制及带信任度的灵活委托授权模型

针对现有RBAC委托模型在支持细致委托粒度和权限传播可控性上存在的不足,提出一种基于映射机制及带信任度的灵活角色委托授权模型FDMTPM。该模型基于坐标化与量化算子的复合运算,考虑角色成员关系的动态委托提出模式度量角色的概念,并以其为委托粒度充分考虑广度和深度上的部分委托限制需求;同时引入信任度实现了对角色中具有不同敏感度的权限传播的控制和灵活的委托需求。最后对委托约束机制和撤销机制进行讨论,确保其在多步委托过程中委托能力的收敛性。

Flexible delegation model with trustworthiness based onpermission mapping mechanism

Against the deficiencies of existing role-based delegation models on supporting a fine delegation granularity and the control of propagation of permissions, this paper proposed a flexible delegation model with trustworthiness based on permission mapping mechanism, called FDMTPM. Based on concerted computing of a vectorizing operator and a measuring operator, considering the new concepts of mobile and immobile users, this paper proposed the concept of the mode measuring role, which acted as the authorized granularity. FDMTPM mode sufficiently considered the necessary of restriction in partial delegation from the angled of scope and depth and realized the control of propagation of permissions that had different degree of sensitivity through the induction of trustworthiness. Finally, it discussed the mechanisms of delegation constraint and revocation, which ensured convergence of delegation in the process of multi-steps delegation.