Title :
A transitive access control model for dynamic roles and attributes
Author_Institution :
Sch. of Sci. & Technol., Univ. of New England, Armidale, NSW, Australia
Abstract :
Role-based access control (RBAC) has gained popularity for the expression of access constraints in information systems but existing RBAC models do not provide sufficient expressive power to support the kinds of fine-grained access control often required. In this paper, we define a new formal model for RBAC which supports controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.
Keywords :
authorisation; information systems; RBAC; access constraints; dynamic roles; formal model; information systems; object attributes; role appointment; role-based access control; subject roles; transitive access control model; transitive role-attribute derivation relationship; Authorization; Information systems; Labeling; Medical services; Permission; access control; attribute; model; role; security;
Conference_Titel :
Cyber Security, Cyber Warfare and Digital Forensic (CyberSec), 2012 International Conference on
Conference_Location :
Kuala Lumpur
Print_ISBN :
978-1-4673-1425-1
DOI :
10.1109/CyberSec.2012.6246105
