用基于角色访问控制实现使用控制模型的管理

Management About Usage Control Model by Role-Based Access Control

使用控制模型是最近提出的对数字对象进行使用和访问的控制模型,它包含了传统访问控制、信任管理和数字权限管理的问题域,是一个综合型模型.但使用控制模型中的管理问题及各元素之间关系的实现细节还没有被详细讨论,因此,将基于角色访问控制模型与使用控制模型相结合,提出了一个用基于角色访问控制来管理使用控制的模型,讨论了它的实现技术,同时利用使用控制中的主体和对象属性的可变性特征实现了访问控制中的职责分离等问题.

Recently presented usage control model has been considered as the next generation control model which is used to access and use digital objects. It is a comprehensive model and covers traditional access control, trust management, digital right management. However, the management and the relationship of components in usage control model have not addressed in previous papers. In this paper, we present a new model that facilitates role-based access control to administrate usage control model. We also address the implementing details. At the same time, the separation of duties in access control is enforced by multiability and continuity in usage control.