“知识库范例应用于授权撤销”的技术报告
Technical report of "The Knowledge Base Paradigm Applied to Delegation Revocation"
摘要：
在基于所有权的访问控制框架中，可以委托权限和管理权限，委托链将形成。在撤销权限时，有不同的方法来处理委托链，这就产生了不同的撤销方案。在本文中，我们从知识库范式的角度研究了委托撤销问题。知识库是用丰富的形式语言对领域知识的形式化规范。多种形式的推理可以应用于这个正式规范，以解决领域中出现的各种问题和任务。换句话说，该范式提出了信息和问题解决之间的严格分离。我们在本文中使用的知识库指定的各种撤销方案的效果。通过对该知识库应用不同的推理，我们可以解决以下任务：确定系统在某个委托或撤销之后的状态;交互式地模拟系统状态随时间的进展;确定用户是否具有给定系统的某个状态的某个权限或管理权限;验证系统的不变量;并且确定哪些撤销方案产生期望结果的特定指定集合。
英文摘要：
In ownership-based access control frameworks with the possibility of delegating permissions and administrative rights, delegation chains will form. There are different ways to treat delegation chains when revoking rights, which give rise to different revocation schemes. In this paper, we investigate the problem of delegation revocation from the perspective of the knowledge base paradigm. A knowledge base is a formal specification of domain knowledge in a rich formal language. Multiple forms of inference can be applied to this formal specification in order to solve various problems and tasks that arise in the domain. In other words, the paradigm proposes a strict separation of concerns between information and problem solving. The knowledge base that we use in this paper specifies the effects of the various revocation schemes. By applying different inferences to this knowledge base, we can solve the following tasks: to determine the state of the system after a certain delegation or revocation; to interactively simulate the progression of the system state through time; to determine whether a user has a certain permission or administrative right given a certain state of the system; to verify invariants of the system; and to determine which revocation schemes give rise to a certain specified set of desired outcomes.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
