I-RBAC: An Identity& Role Based Access Control Model

Role-based Access Control (RBAC) provides an efficient means of managing authorization of the system resources. In the implementation phase, access control should be strong and efficient based on user authentication information, so the RBAC mechanism commonly requires authentication as a prerequisite. By cooperating with identity-based cryptography, this paper first presents an identity& role based access control (I-RBAC) model which supports user´s authentication internally. In our model, both aspect of user authentication and role-based authorization can be verified by a user´s signature simultaneously. An implementation method of I-RBAC is also presented using a variant of an ID-based signature scheme due to Cha and Cheon.