A Three-Dimensional Role-Based Delegation Model

Delegation mechanism is an important technology for improving flexibility of access control in synthetic application systems, all these system are typically multi-sector and multiuser systems and where all the entities and their relationships are quite complex. Based on RBDMO and RDM2000, we propose a user-to-user delegation called three-dimensional role-based delegation model (RBDM3D) that is practically useful in these synthetic systems. It can decentralize permissions management and make access control more facile. Unlike others existing delegation models, the model considers that all permissions are three-dimensional and temporarily-constrained. Furthermore, we present the concept of role group that is related with department and the formal definition of delegation. Finally, we illustrate authority delegation in Government Procurement Platform on Basic Education.