2008 International Symposium on Electronic Commerce and Security
An Extended RBAC Model for Uniform Implementation of Role Hierarchy and Constraint
August 03-August 05
ISBN: 978-0-7695-3258-5
Role based access control (RBAC) has been widely adopted as a policy neutral access control model by many IT corporations. RBAC96, which is the most famous family of RBAC models, provides a common frame reference for related research and development. Many properties proposed in the family, e.g. limited inheritance, mutually exclusive roles, cardinality, and interaction, have been separately discussed in the previous work. In this paper, an extended RBAC model implementing those properties is proposed to provide an approach for implementing RBAC3. The extended RBAC model is based on deputy mechanism and is called deputy-based access control (DBAC).??Since the private role hierarchy and constraint can be uniformly handled in DBAC, a flexible and powerful access control system can be implemented.
Index Terms:
RBAC, access control, security
Citation:
Yi Ren, Zhiting Xiao, Sipei Guo, "An Extended RBAC Model for Uniform Implementation of Role Hierarchy and Constraint," isecs, pp.169-174, 2008 International Symposium on Electronic Commerce and Security, 2008
Usage of this product signifies your acceptance of the
Terms of Use.
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||