Research Of Delegation Based On UCON And Dynamic Fuzzy Neural Network

At present, with the continuous maturation of access control and Web, the applications based on access control are emerging. Delegation in the distributed environment has become a research focus in the field of access control, and it provides a broader expanding space for access control. Although many researchers have done some research works on delegation and made some achievements, there are still some issues to be resolved and diserved a deeper minning.In view of usage control-UCON model has features of continuous control and variable properties, and the model can realize the needs of access control diversely and precisely, UCON is used to control delegation in this thesis. But the authority in UCON is a definite process, either authorized or not, so the process is not flexible enough. The introduction of credibility simplifies the authorization policy according to the proper rights assigned by credibility value to delegatee. In this way, the delegation model in this thesis has dynamic flexibility, which not only keeps the advantages of UCON, but also changes the size of the rights authorized.The following is the main research works of this thesis:1. The basic characteristics of delegation is analyzed in this thesis, and several new rules are proposed in this thesis as the existing rules can't meet the needs in the distributed environment continuously, flexiblely and diversely. With these new rules, the delegation behavior can be restrained more effectively, and the delegation between the users can be more controlable.2. The credibility calculated by using dynamic fuzzy neural network algorithm is accurate and intelligent. UCON and credibility are brought to the delegation in this thesis. Delegator can assign delegatee corresponding rights according to delegatee's credibility conveniently and fastly, and can control delegation in the process.3. A delegation model UCONDFNND based on UCON and dynamic fuzzy neural network is proposed. This model has the function such as delegation management, continuous elegation process, variable attribute and credible management. It improves the system's security and efficiency, and meets the needs of the distributed environment. The Reference Monitor of the model is designed, which can monitor the whole process of delegation in real time. 4. A delegation system is developed in.net platform based on UCONDFNND model. The system verifies that UCONDFNND model can realize delegation and can detect subject's behavior in real time and according which to gain corresponding rights. Therefore, the delegation system carried out has broad applicability.