Research And Application Of Role-based Dynamic Delegation Model

Delegation is an indispensable part of access control model. It has become a crucial access control management mechanism in secure distributed computing environment as well as a hot topic in the field of access control authorization. In distributed system, large-scale system, cooperative computation system, delegation among different users plays an important role in realizing flexible and efficient access control.The main content of this paper includes:(1) Bring forward a new delegation model: Role-based Dynamic Delegation Model (RBDDM).Firstly, the author analyzed and compared domestic and overseas role-based delegation models. Then summarized there were some problems need to be solved urgently yet. In order to solve such problems RBDDM was proposed. The paper described the model with mathematical expressions. Then it expatiated how to realize part-role delegation, repeated role delegation, bilateral protocol as well as how to solve the problems about dynamic restriction of separating responsibilities, permission sharing based on Agent technology in the whole delegation process.(2) Analyzing and summarizing functions of official workers in local government.After analyzing the structure of local government's administrative department and the process of administrative permit affairs the author gave a new reflection relationship among positions, roles and permissions combined with RBDDM. Then pointed out how important to carry out delegation in the procedure of administrative permit affairs.(3) Expatiating the delegation process in local administrative permit management system by multiple ways.The paper used XML to define the communication information format between users and Agent. Meanwhile it also used pseudocode and programme flow chart to describe the whole process of delegation.