Research on Usage Control Model with Delegation Characteristics Based on OM-AM Methodology

UCON_ABC is a basic framework of next generation access control policy Usage Control that is composed of Authorization-oBlige-Condition components, but so far it lacks of important delegation characteristic. The paper analyses the behaviors of delegation in UCON based on OM-AM engineering principles, presents a formalized usage control model with delegation features using BNF Extensions, called as UCON_D, and further articulates its hybrid architecture based on Client & Server Delegation Reference Monitors and relative key protocol functions. UCON_D is an extension model of UCON_ABC in the aspect of delegation authorization, and it resolves the delegation question of Usage Control Model. Moreover, we specify delegation procedure of an application for Digital Medium Resource Distribution System.