ATTRIBUTE-BASED DELEGATION IN PRIVILEGE MANAGEMENT OF PDM SYSTEM

摘要

This paper proposes an Attribute-Based-Delegation-Model (ABDM) with an extended delegation constraint consists of both delegation attribute expression (DAE) and delegation prerequisite condition (CR). In ABDM, a delegatee must satisfy delegation constraint (especially DAE) when assigned to a delegation role. With delegation constraint, a delegator can restrict the delegatee candidates more strictly. ABDM relieves delegators and system administrators of security management work in PDM system and makes delegation more secure.