协作环境下支持委托的访问控制技术

协作环境下的访问控制具有动态性和上下文相关性,传统的访问控制不能满足协作系统的特殊需求。针对协作环境的特点,从任务分解及映射、时间约束、授权委托等方面对传统的RBAC模型进行扩展,提出一个支持委托的访问控制模型(DS-RBAC)。最后给出了由多种控制机制相结合的实现方案,实现了协作组内部自主授权和动态访问控制相结合的灵活权限管理。

Delegation-supported and Role-based Access Control in Collaborative Environment

Access control in collaborative environment has dynamic characteristic and contextual relevance. However, traditional role-based access control is far from satisfying demands of the collaborative system. Aiming at the characteristics of collaborative circumstance, a delegation-supported and role-based access control（DS-RBAC） is proposed which extends traditional RBAC from task decomposing and mapping, time constraints and delegation. Finally, an implementation scheme, which combines a variety of control mechanisms, is designed to achieve flexible rights management with internal self-authorization for collaborative groups and dynamic access control.