具有角色特性的UCON属性管理研究

Research of attributes management of UCON with role properties

属性作为UCON模型的核心元素,缺乏灵活简洁的管理机制。针对该问题,通过分析核心UCON模型属性的特征,提出了一种具有角色特性的属性管理结构(MASUR)。该结构依据创建属性的能力将主体划分为系统管理主体、属主主体和一般主体,扩展了核心UCON模型的中心化管理方式,具备了区分各主体的职责能力;然后将属性分为系统属性、自主属性和受控属性,提出属主的概念,明确地限定属性的更新主体;最后借鉴成熟的RBAC成果,引入属性角色与操作角色,以适用于现代大规模系统的属性分类和管理。MASUR为现代系统提供了一种对属性更宽泛、更细粒度的灵活控制方法。

Attributes as the core element of UCON model, are short of a brief and flexible administrative pattern. To solve this problem, this paper analyzed the properties of attributes of core UCON model and proposed a managed attributes structure of UCON model with role properties（MASUR）. MASUR was sorted into system administrative subjects, owner subjects and ge- neral subjects by the ability of creating attributes. Thus, it expanded the centric-administration mode of core UCON model and owned the ability to clarify the duties of subjects. Moreover, MASUR had three attribute types：system attributes,discretionary attributes and other-controlled attributes, and gave a new concept＂ owner＂ to clearly restrict the subjects to updating attribute＇ s value. Considered the mature theory result of RBAC, the structure involved the attributes role and operator role, which was more convenient to the attributes classifies in modem large-scale systems. MASUR gave a wider and fine-grained flexible con- trolling attributes method in modern systems.