关键词: 使用控制, 安全性分析, 有限状态机, 委托, 基于角色的委托模型

Abstract: In order to resolve the problem of safety analysis for Usage Control with delegation feature, this article first formalized the delegation process for its one child model, pre-authorization model; the security of a general UCONpreA model with delegation feature was undecidable through analysis, by means of constructing a finite state machine, the security of a constrained UCONpreA model with delegation feature was proved decidable; lastly, the traditional role based delegation model was simulated successfully using the constrained model. This research enhances the expression power of UCON even further, and ensures its safety effectively.

Key words: usage control, safety analysis, finite state machine, delegation, RBDM0