Study on attribute-based revocation in delegation
Chunxiao Ye, Yunqing Fu, Jiang Zhong, Yong Feng · 2007
In ABDM, revocation focus on how to revoke those delegated roles or permissions. Considering the characteristics of delegation operation in ABDM, this paper proposes two novel different revocations: revocation triggered by the change of user's delegation attribute expression and revocation triggered by the change of delegation permission's delegation attribute expression. In ABDM, these two revocations can automatically revoke delegation roles or permissions from delegatee when their DAEs no longer satisfy delegation roles' or permissions' DAEs, thus guarantee the security of delegation.