文献类型：会议论文

英文题名：A Delegation Logic Based Authorization Mechanism for Virtual Organizations

作者：Gu, Chunhua[1];Zhang, Xueqin[1];Song, Guoxin[1]

机构：[1]E China Univ Sci & Technol, Coll Informat Sci & Engn, Shanghai 200237, Peoples R China

会议论文集：4th International Workshop for Applied PKI held in Conjunction with 8th Information Security Conference

会议日期：SEP 21-23, 2005

会议地点：Singapore, SINGAPORE

语种：英文

外文关键词：RBAC; Distributed systems; PKI; Virtual Organization

摘要：Because of the new business trends such as cooperating, downsizing and resource sharing, the use of virtual organization (VU) is gaining increasing importance as a model for building large-scale business information systems. Authorization is essential in VU in order to control the access to shared resources. But authorization in VU is challenging because the participants of VU need to collaborate in a distributed, dynamic and heterogeneous environment, and accordingly the access control policies are complex. A delegation logic based authorization mechanism is put forward in this paper. Our proposed approach translates the access requests, credentials and access policies into unified delegation logic rules. Based on the calculation on those rules, the access decision is made. We introduce the concept of Access Unit (AU), which wraps the AC system of a task. The rude exchange interface of AU is defined. The main contribution of this paper is that it suggests a practical mechanism for implementing authorization for VU. In essence, we propose an approach to enforce RBAC in VU based on task/project structure.