Research on Usage Control Model with Delegation Characteristics Based on OM-AM Methodology
Research on Usage Control Model with Delegation Characteristics Based on OM-AM Methodology
复制标题
DOI：
10.1109/npc.2007.103
复制
发表时间：
2007-09
期刊：
影响因子：
--
通讯作者：
Zhiyong Zhang;Lin Yang;Qingqi Pei;Jianfeng Ma
中科院分区：
文献类型：
--
作者：
Zhiyong Zhang;Lin Yang;Qingqi Pei;Jianfeng Ma
UCONABC是下一代访问控制策略使用控制的基本框架，它由授权-强制条件组件组成，但到目前为止，它缺乏重要的委托特性。基于OM-AM工程原理对UCON中的委托行为进行了分析，提出了一种基于BNF扩展的具有委托特征的形式化使用控制模型UCOND，并进一步阐述了其基于客户端和服务器委托引用监控器的混合体系结构和相关的关键协议函数。UCOND是UCONABC在委托授权方面的扩展模型，它解决了使用控制模型的委托问题。此外，我们还详细说明了一个数字媒体资源分发系统应用程序的委托过程。
UCONABC is a basic framework of next generation access control policy Usage Control that is composed of Authorization-oBlige-Condition components, but so far it lacks of important delegation characteristic. The paper analyses the behaviors of delegation in UCON based on OM-AM engineering principles, presents a formalized usage control model with delegation features using BNF Extensions, called as UCOND, and further articulates its hybrid architecture based on Client & Server Delegation Reference Monitors and relative key protocol functions. UCOND is an extension model of UCONABC in the aspect of delegation authorization, and it resolves the delegation question of Usage Control Model. Moreover, we specify delegation procedure of an application for Digital Medium Resource Distribution System.