【摘要】 为提高用户-用户委托过程的安全性,结合门限思想对PBDM0进行扩展,提出了一种基于门限的委托模型。模型中委托者根据需要将其所要授出的一些重要权限分割成n个互不相同的部分,每一部分与一子角色相对应,不同的受托者通过承担不同的子角色得到一部分权限。n个受托者构成受托团体代替受托者完成相应的工作任务。任务来临时,受托团体中的个体不能独自完成,要受托团体中任意大于等于k个受托者合作才能完成相应任务。该模型实现了多个受托者的合作,使委托更易实现,并且满足最小特权原则和应急原则。更多还原

【Abstract】 To increase the security of delegation, a threshold-based delegation model called TBDM is presented, which is based on the analysis of current delegation models. Combining with the threshold idea TBDM is an extension of PBDM0. In TBDM, some delegating user’s permissions are divided into n partitions. One partition is difference from another one. Every partition is associated with one role. Different delegated users got corresponding permissions through acting the different roles. Then these delegated users constituted a group which is able to complete the corresponding work instead of delegating user. One delegated user in the group couldn’t complete the corre- sponding work solely. Only if the number of delegated users who took part in the collaboration is bigger than k would the work be complete. The collaboration among some delegated users is realized in TBDM. This model can meet an emergency and principle of least privilege.更多还原