Towards More Controllable and Practical Delegation

摘要: Delegation is essential to the flexibility and scalability of trust management systems. But unrestricted delegation may result in privilege proliferation breach privacy information The models existing systems can not avoid transition, being lack effective constraints on propagation, which easily lead proliferation. In this paper, we propose a generalized constrained model (GCDM), uses typed privileges control potential restricts propagation scope trees by novel constraint mechanism named spacial constraints. This paper also designs rule-based language REAL05 express policies semantics for GCDM. supports flexible while subsequent delegations. Comprehensive samples simulation results show that our approach more controllable practical.