关键词: 访问控制, 服务共享, 代理系统, 代理角色验证

Abstract: To realize service sharing, an access control mechanism was needed for heterogeneous access control models. Based on Administrator Role Based Access Control Model (ARBAC97), Agent system was introduced, and distributed role definition framework for different access control architectures was constructed. Approaches to construct the delegation roles associated with specified shared services and verification tool for integrity of delegation administrative role were presented. This method avoided the privilege leakage, improved authorization granularity and facilitated the management of shared services. The architecture and implementation mechanism of delegation access control model were discussed and applied in networked manufacturing service platforms integration.

Key words: access control, service sharing, Agent system, delegation role verification