基于时间限制的委托授权模型

Temporal Constraints Based Delegation Model

将时间限制引入委托授权模型,提出了基于时间限制的委托授权模型(TCDM)。该模型提出了委托用户和被委托用户的资格判定条件,分析了授权宽度和授权深度的约束条件及基于时间限制的自动撤销委托授权机制。TCDM模型可应用于Permission-based Delegation Model(PBDM)、Role-based Delegation Model 2000(RDM2000)等其他授权模型,对它们进行扩展,满足实际应用中的时间性安全需求,具有普遍适用性。

Temporal constraints are introduced into the delegation model in this paper, and then the temporal constraints based delegation model（TCDM） is proposed. The model presents the prerequisite conditions of the delegator and the delegatee, analyzes the constraints of the delegation width and the delegation depth, and the delegation revocation based on the temporal constraints. TCDM can be used into such delegation models as PBDM（Permission-based Delegation Model）, RDM2000（Role-based Delegation Model 2000）, etc, and can be extended other models to meet the security requirements of temporality.