GADAM: An Authorization Model Based on Attribute Delegation in Grid

Inherited the flexibility merit of the access control model based on attribute(ABAC), the authorization model based on attribute delegation in grid (GADAM) is put forward, which Expressed the attribute set with attribute expression in this model, and adopted the method based on attribute delegation directly to assign and transmit the permission. Complied with the constraint mechanism of atomic authorization and the simplest authorization attributes in delegation strictly, the resource search along opposite direction of the authorization chain for the requester, if trusted authorization source could be found, the final attribute set possessed by requester is trusted. According to the analysis, the model has the characters of better security and flexibility, which was suitable for gird.