摘要
在分散式自主授权模式中,接受授权的用户可以将转授给他的权限再次转授给其他人,经过多步转授的权限扩散与不完全的委托撤销可能导致隐性授权冲突.在以往的授权模型中,模型设计的重点在于如何授权,而对于授权撤销考虑甚少.由于转授权路径生成的随意性,增加了遍历路径完成授权回收的难度.针对授权路径的生成和转授权回收进行研究,引入欧拉图对授权路径构建进行约束,在此基础上给出了授权路径构建算法与转授权路径遍历回收方法,通过有目的的授权路径构建,简化转授权路径遍历过程,解决转授权路径遍历不完全导致的授权撤销不完整问题,防止权限扩散并消除隐性授权冲突.
In discretionary authorization model,user can transfer privileges to the other subject.Implicit authorization conflicts could be caused by privilege propagation on multi-step delegation and incompletely delegation revocation.Current authorization models are designed to assign privileges effectively rather than revoke privileges conveniently.No additional constraint to creation of topology of delegation,revocation algorithm for traversal propagation path is difficult and complex.A topologic structure based on Euler graph is introduced to authorization delegation graph.An insert algorithm is presented to build Euler delegation graph,and traversal algorithms on Euler delegation graph are given to solve direct delegation revocation and complete delegation revocation.Consequently,the potential for implicit authorization conflict is reduced.
出处
《小型微型计算机系统》
CSCD
北大核心
2012年第10期2208-2212,共5页
Journal of Chinese Computer Systems
基金
华中科技大学2011年自主创新研究基金-青年基金项目(2011QN267)资助
关键词
撤销
委托
欧拉图
授权扩散
授权冲突
revocation
delegation
euler graph
authorization propagation
authorization conflict
