A Role-Based Hierarchical Administrative Model

In large scale applications, the effective role-based access control (RBAC) administration is a major issue. Multihierarchies decentralized administration is needed in large enterprise. The ARBAC administrate RBAC based on role hierarchies and administrative scope, but it can not meet the requirement of multihierarchies decentralized administration. We propose role-based hierarchical administrative model named MHARBAC using role tree to support top-down authorization. We redefine the administrative scope which contains user scope, role scope and permission scope. The MHARBAC model has significant advantages over existing models on term of supporting decentralized administration.