Trust-OrBAC : a trust access control model in multi-organization environments - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès ICISS '12 : 8th International Conference on Information Systems Security Année : 2012

Trust-OrBAC : a trust access control model in multi-organization environments

Résumé

Access control in Multi-Organization Environment is a critical issue. Classical access control models like Role Based Access Control (RBAC) and Organization Based Access Control (ORBAC) need some improvements to be used in such environment, where the collaboration is established between organizations and not directly with the clients. In particular, some characteristics of this scenario are that the users may be unknown in advance and/or the behaviors of the users and the organization may change during the collaboration. Hence, in this context the use of trust management with an access control model is recommended. To achieve this goal in this paper a new model called Trust-Orbac that adds the notion of trust management to ORBAC is presented. This approach consists in defining two dynamic trust vectors: one for the organizations and one for users which are based on different parameters such as knowledge, reputation and experience. Finally, we illustrate the use of Trust-Orbac with a case study.
Fichier non déposé

Dates et versions

hal-00767797 , version 1 (20-12-2012)

Identifiants

Citer

Khalifa Toumi, César Andrés, Ana Rosa Cavalli. Trust-OrBAC : a trust access control model in multi-organization environments. ICISS '12 : 8th International Conference on Information Systems Security, Dec 2012, Guwahati, India. pp.89-103, ⟨10.1007/978-3-642-35130-3_7⟩. ⟨hal-00767797⟩
161 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More