RPPM模型中的缓存和审计
Caching and Auditing in the RPPM Model
摘要:
Crampton和Sellwood最近介绍了一种基于关系的访问控制的变体,它基于关系、路径和主体匹配的概念,我们将其称为RPPM模型。在本文中,我们表明,RPPM模型可以扩展到提供支持缓存的授权决策和执行的职责分离的政策。我们表明,这些扩展是自然和强大的。事实上,缓存提供了更大的优势,在RPPM比它在大多数其他访问控制模型,我们能够支持广泛的职责分离的政策。
英文摘要:
Crampton and Sellwood recently introduced a variant of relationship-based access control based on the concepts of relationships, paths and principal matching, to which we will refer as the RPPM model. In this paper, we show that the RPPM model can be extended to provide support for caching of authorization decisions and enforcement of separation of duty policies. We show that these extensions are natural and powerful. Indeed, caching provides far greater advantages in RPPM than it does in most other access control models and we are able to support a wide range of separation of duty policies.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。