Abstract

The article is devoted to the description of the authorization method based on the decomposition of numbers into simple somno-residents. The article presents a formal description of the authorization system, which includes subjects and objects of authorization, as well as algorithms for the authorization procedure. The proposed authorization system provides for a single type of privilege that describes the relationship between the subjects and objects of the system and can be interpreted in binary form: available / not available or allowed/denied. The concept of composite objects is introduced, access to which is determined by the permission of access to other authorization objects. The principle of constructing a hierarchy of authorization objects is considered. The concept of a role as a named set of privileges is introduced, an algorithm for assigning a role to an authorization subject is described. The description of the authorization system is accompanied by examples that explain the principles of its operation, as well as assessments indicating the boundaries of its application.