【摘要】 基于委托是个体行为这一观点,剔除委托研究中的少量具有企业管理特征的行为,提出支持用户委托的RBAC模型——D-RBAC.模型的本质是在RBAC模型的基础上,增加一个委托支持模块,从而提供了用户-用户委托支持的扩展.模型本身具有策略无关、设计简单、适用面广的特点,支持现有研究中所有反映委托个体行为特征的委托操作.另外,模型还提供了管理员干预的支持,在尽量减少管理员管理工作的前提下,给出了有效的解决方案,使得管理员能够规范委托人的行为,从而达到既允许用户委托,又不破坏企业或组织的访问控制策略.更多还原

【Abstract】 Based on the viewpoint that the delegation is a personal behavior,the dissertation proposes an improved D-RBAC(Delegation-supported RBAC)model.It adds a delegation-supported module to the RBAC model and accordingly provides a user-to-user delegation-supported extension.It is a policy-independent,simply designed and extensively applicable delegation model.It supports all personal delegation behaviors under the recent research.Furthermore,it supports administrator intervention,reducing his work as much as possible and enabling the administrator to regulate the delegators′behavior without violating the access control policies of an enterprise or an organization.更多还原