A delegation model for extended RBAC - Archive ouverte HAL
Article Dans Une Revue International Journal of Information Security Année : 2010

A delegation model for extended RBAC

Résumé

In the field of access control, delegation is an important aspect that is considered part of the administration mechanism. Thus, a comprehensive access control model must provide a flexible administration model to manage delegation and revocation. Unfortunately, to our best knowledge, there is no complete model for describing all delegation requirements for role-based access control. Therefore, proposed models are often extended to support new delegation or revocation characteristics, which is a complex task to manage and requires the redefinition of these models. Moreover, since delegation is modelled separately from administration, this requires the specification of a separate security policy to deal with delegation.In this paper we describe a new delegation approach for extended role-based access control models. We show that our approach is flexible and is sufficient to deal with administration and delegation requirements in a homogeneous unified framework. Moreover, it provides means to express various delegation and revocation dimensions in a simple manner.

Dates et versions

hal-00484496 , version 1 (18-05-2010)

Identifiants

Citer

Meriam Ben Ghorbel, Frédéric Cuppens, Nora Cuppens-Boulahia, Adel Bouhoula. A delegation model for extended RBAC. International Journal of Information Security, 2010, ⟨10.1007/s10207-010-0104-3⟩. ⟨hal-00484496⟩
71 Consultations
0 Téléchargements

Altmetric

Partager

More