关键词: 使用控制, 访问控制, 权限, 委托

Abstract: As the next generation of access control model, Usage Control integrates and extends the traditional access control models with distinguishing properties of decision continuity and attribute mutability, providing a wide range and fine-grain access control protection for digital resources under modern open network environment. Right delegation is a part of the access control system, it’s an important way to realize role backup, decentralization of authority and collaborative work. Considering the demand of delegation for UCON and the shortage of research results, this paper proposes a permission-based delegation model for UCON, controlling and constraining the delegation process with authorizations, obligations and conditions decision factors. A formalized definition has been given, permission delegation and revocation are realized by using a defined minimum assertion collection. This model extends the continuity and mutability characteristics of UCON, it’s easy to use mechanism for rights delegation, can facilitate rights delegation between users in a UCON system.

Key words: Usage Control, Access Control, right, delegation