支持动态协作的委托授权意愿协商

委托授权是为了实现资源共享与协作, 在主体之间进行的一种灵活授权方式, 是将自己拥有的某些权限转授给他人. 现有工作主要针对委托授权的时效性、单调性、委托深度、广度和粒度以及委托权限的撤销等方面进行研究, 提出了不同的委托授权模型和方法, 但是缺乏讨论委托授权中的意愿协商, 即同时支持委托者和受托者的意愿表达和匹配问题. 针对这一不足, 提出委托授权意愿逻辑, 描述委托授权双方意愿, 并通过模糊意愿匹配算法,实现委托授权双方的意愿匹配; 提出委托授权协商模型, 将委托授权意愿逻辑与访问控制系统结合, 实验验证意愿匹配算法的有效性和效率.

Supporting dynamic intention agreement for authorization delegation in multi-party collaboration

Delegation is an assignment of authority and responsibility between persons for sharing resources and working collaboratively. Many models and solutions have been proposed with respect to delegation permanence, monotonicity, levels, granularity, and revocation etc. However, the important aspect of delegation agreement is less discussed which aims at carrying out delegation with consideration of the intention of both delegator and delegatee rather than the currently considering delegator only. In this paper, we propose delegation intention logic that is expressive, fine-grained and inferential in specifying the intentions of both sides and system security constraints. With the help of fuzzy logic, the proposed intention algorithm finds the most appropriate candidates for a delegation intention. Some experiments are performed to verify our method, as well as the implementation architecture is provided.