一种灵活的基于权限划分的授权代理模型

A Flexible Delegation Model Based on Permissions Division

针对传统授权代理模型灵活性较低、结构复杂等问题,在基于权限代理模型的基础上,提出一种改进的授权代理模型灵活的基于权限划分的授权代理模型.该模型使用划分权限方法代替划分角色,将所有权限划分为3个集合:可代理权限集、半可代理权限集和不可代理权限集,实现了特定权限代理并简化了模型结构.实验结果表明,该模型在保证系统安全性的同时,使授权代理的实现和管理更简单、灵活。

In view of the problem of low flexibility and complex structure of traditional delegation models,this paper introduces an improved delegation model named flexible delegation model based on permissions division,which is built on permission-based delegation model.Instead of dividing roles,the permissions are divided into three sets in this model,which include delegable permission,semi-delegable permission and un-delegable permission.It realizes special permissions delegation and simplifies the structure of the model.The results show that this model makes the realization and management of the delegation more easy and flexible,at the same time it ensures the security of the system.