| 细粒度的基于信任度的可控委托授权模型 |
| |
| 引用本文： | 翟征德,冯登国,徐震.细粒度的基于信任度的可控委托授权模型[J].软件学报,2007,18(8):2002-2015. |
| |
| 作者姓名： | 翟征德 冯登国 徐震 |
| |
| 作者单位： | 中国科学院,软件研究所,信息安全国家重点实验室,北京,100080 |
| |
| 基金项目： | 国家自然科学基金;国家高技术研究发展计划(863计划);国家科技支撑计划 |
| |
| 摘 要： | 综合基于角色的访问控制和信任管理各自的优势,提出了一个适用于开放式环境的细粒度可控委托授权模型--FCDAM(fine-grained controllable delegation authorization model),基于信任度实现了对角色中具有不同敏感度的权限传播控制.提出了为本地策略中的权限分配信任度阈值的方法,为RT0添加了信任度支持,给出了在这种扩展后的信任管理系统中计算实体信任度的算法,并结合具体实例对模型的使用进行了说明.
|
| 关 键 词： | 委托 信任度 权限传播 信任管理 授权模型 |
| 收稿时间： | 2007-02-26 |
| 修稿时间： | 2007-05-31 |
Fine-Grained Controllable Delegation Authorization Model Based on Trustworthiness |
| |
| ZHAI Zheng-De,FENG Deng-Guo and XU Zhen.Fine-Grained Controllable Delegation Authorization Model Based on Trustworthiness[J].Journal of Software,2007,18(8):2002-2015. |
| |
| Authors: | ZHAI Zheng-De FENG Deng-Guo and XU Zhen |
| |
| Affiliation: | State Key Laboratory of Information Security, Institute of Software, The Chinese Academy of Sciences, Beijing 100080, China |
| |
| Abstract: | A fine-grained controllable delegation authorization model (FCDAM) suitable for open environments is presented. It integrates the merits of both RBAC (role based access control) and role-based trust management and can effectively control the propagation of permissions of different sensitivity levels in roles. An approach for assigning trustworthiness thresholds to permissions in local access control policy is discussed. The RT0 framework is extended to support trustworthiness and the algorithm of calculating the values of trustworthiness of entities in the extended framework is proposed. The usage of the FCDAM model is illustrated through a typical example. |
| |
| Keywords: | delegation trustworthiness propagation of permission trust management authorization model |
| 本文献已被 维普 万方数据 等数据库收录！ |
| 点击此处可从《软件学报》浏览原始摘要信息 |
|
点击此处可从《软件学报》下载全文 |
