一种基于RBAC的UCON管理模型-计算机科学.PDFVIP

Vo 1. 43 No. 10 第 43 卷第10 期 计算机科学 2016 年 10 月 Computer Science Oct 2016 一种基于 RBAC 的 UCON 管理模型 刘志锋毛竹林 (江苏大学计算机科学与通信工程学院 镇江 212013) 摘 要 UωN模型作为新一代的访问控制模型，能够通过可变属性对使用实现连续控制，可满足当前开放的网络 环境需求。但UCON模型仍存在一些缺陷:不能实现对权限的管理、对权限的委托和对属性来源的管理。为此，在 UCON模型的基础上引入角色元素并把角色分为提供者角色和消费者角色，然后把权限分为直接使用权限和需要授 权权限，以实现对 UCON模型中权限的管理和权限的委托，并通过提供者角色对可变属性的来源进行管理，使UOCN 对权限管理更加灵活，属性来源更加可信，ρ、而使 UCON 的应用范围更加广泛。 关键词 U∞N，角色，权限管理，权限委托，属性来源管理 中固法分类号 TP309 文献标识码 A DOI 10. 11896/j. issn. 1002-137X. 2016. 10.028 Administrative Model for UCON Based on RBAC LIU Zhi-feng 岛1AO Zhu-lin CSchool of Computer Science and Telecommunication Engineering ,]iangsu University ,Zhenjiang 212013 ,China) Abstract UCON is a new generation access control model. It can control usage continually by variable attribute to meet the current demand of open network. But there are still some drawbacks in UCON model , that is to say the authority management ,authority delegation and attribute source management can not be achieved. So the role elements are intro- duced and divided into the provider role and the consumer role based on the UCON model. Then the authority is divided into the direct usage authority and the authority to be authoriz吐， in order to achieve the management of authority and authority delegation in the UCON model. And through the role of the provider ,the management of the source of variable attributes can be achieved ,making UOCN more flexible in management of authority and the attribute source more relia ble ,so the application scope of UCON is more exte