关键词: 安全审计, 访问控制, 委托, 授权

Abstract: Considering the security and functionality deficiencies of delegation in access control, this paper proposes an RBAC delegation model with security audit function and gives its formal definition and description based on the contrastive analysis of RBAC delegation model’s features and the concept of security audit. This model defines the restrictions and transmission constraints for delegation, which reflects the traits of delegation, implements the process of delegation, revocation and session authorization by applying audit record sets, and improves the security audit function by audit monitoring and rule event response to make the delegation authorization have its autonomy and variability. The application and practice in management information system implies that this model is a secure and easily manageable delegation authorization mechanism, which can suit multiple delegation strategy.

Key words: security audit, access control, delegation, authorization