<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01581349</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-03T22:22:21+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Modelling and inferring on role-based access control policies using data dependencies</title>
            <author role="aut">
              <persName>
                <forename type="first">Romuald</forename>
                <surname>Thion</surname>
              </persName>
              <email type="md5">b062d9ebe76644094ce6ef9cae9c4489</email>
              <email type="domain">univ-lyon1.fr</email>
              <idno type="idhal" notation="string">romuald-thion</idno>
              <idno type="idhal" notation="numeric">4093</idno>
              <idno type="halauthorid" notation="string">11881-4093</idno>
              <idno type="IDREF">https://www.idref.fr/131879375</idno>
              <affiliation ref="#struct-2003"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Stéphane</forename>
                <surname>Coulondre</surname>
              </persName>
              <email type="md5">388ef980416d8c747fb7fb0f3088f3e4</email>
              <email type="domain">insa-lyon.fr</email>
              <idno type="idhal" notation="string">stephane-coulondre</idno>
              <idno type="idhal" notation="numeric">7024</idno>
              <idno type="halauthorid" notation="string">17285-7024</idno>
              <idno type="IDREF">https://www.idref.fr/085810061</idno>
              <affiliation ref="#struct-2003"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Équipe gestionnaire des publications</forename>
                <surname>SI LIRIS</surname>
              </persName>
              <email type="md5">e23ef1a28486101db4cd509fd74c3ade</email>
              <email type="domain">liris.cnrs.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-09-04 15:09:39</date>
              <date type="whenWritten">2006-09</date>
              <date type="whenModified">2025-09-03 10:46:56</date>
              <date type="whenReleased">2017-09-04 15:09:39</date>
              <date type="whenProduced">2006-09-01</date>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="314372">
                <persName>
                  <forename>Équipe gestionnaire des publications</forename>
                  <surname>SI LIRIS</surname>
                </persName>
                <email type="md5">e23ef1a28486101db4cd509fd74c3ade</email>
                <email type="domain">liris.cnrs.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01581349</idno>
            <idno type="halUri">https://hal.science/hal-01581349</idno>
            <idno type="halBibtex">thion:hal-01581349</idno>
            <idno type="halRefHtml">&lt;i&gt;17th International Conference on Database and Expert Systems Applications, DEXA'06&lt;/i&gt;, Sep 2006, Krakow, Poland. pp.914-923</idno>
            <idno type="halRef">17th International Conference on Database and Expert Systems Applications, DEXA'06, Sep 2006, Krakow, Poland. pp.914-923</idno>
            <availability status="restricted"/>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="UNIV-LYON1">Université Claude Bernard - Lyon I</idno>
            <idno type="stamp" n="UNIV-LYON2">Université Lumière Lyon 2</idno>
            <idno type="stamp" n="INSA-LYON">Institut National des Sciences Appliquées de Lyon</idno>
            <idno type="stamp" n="EC-LYON">Ecole Centrale de Lyon</idno>
            <idno type="stamp" n="LIRIS" corresp="UNIV-LYON1">Laboratoire d'InfoRmatique en Image et Systèmes d'information</idno>
            <idno type="stamp" n="LABEXIMU">Laboratoire d’Excellence Intelligences des Mondes Urbains</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="UDL">UDL</idno>
            <idno type="stamp" n="UNIV-LYON">Université de Lyon</idno>
            <idno type="stamp" n="HAL-LYON-2-NOUVELLE-VERSION">Nouvelle version portail </idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Modelling and inferring on role-based access control policies using data dependencies</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Romuald</forename>
                    <surname>Thion</surname>
                  </persName>
                  <email type="md5">b062d9ebe76644094ce6ef9cae9c4489</email>
                  <email type="domain">univ-lyon1.fr</email>
                  <idno type="idhal" notation="string">romuald-thion</idno>
                  <idno type="idhal" notation="numeric">4093</idno>
                  <idno type="halauthorid" notation="string">11881-4093</idno>
                  <idno type="IDREF">https://www.idref.fr/131879375</idno>
                  <affiliation ref="#struct-2003"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Stéphane</forename>
                    <surname>Coulondre</surname>
                  </persName>
                  <email type="md5">388ef980416d8c747fb7fb0f3088f3e4</email>
                  <email type="domain">insa-lyon.fr</email>
                  <idno type="idhal" notation="string">stephane-coulondre</idno>
                  <idno type="idhal" notation="numeric">7024</idno>
                  <idno type="halauthorid" notation="string">17285-7024</idno>
                  <idno type="IDREF">https://www.idref.fr/085810061</idno>
                  <affiliation ref="#struct-2003"/>
                </author>
              </analytic>
              <monogr>
                <idno type="localRef">2423</idno>
                <meeting>
                  <title>17th International Conference on Database and Expert Systems Applications, DEXA'06</title>
                  <date type="start">2006-09-01</date>
                  <settlement>Krakow</settlement>
                  <country key="PL">Poland</country>
                </meeting>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="pp">914-923</biblScope>
                  <date type="datePub">2006-09</date>
                </imprint>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Role-Based Access Control (RBAC) models are becoming a de facto standard, greatly simplifying management and administration tasks. Organizational constraints were introduced (e.g.: mutually exclusive roles, cardinality, prerequisite roles) to reflect peculiarities of organizations. Thus, the number of rules is increasing and policies are becoming more and more complex: understanding and analyzing large policies in which several security officers are involved can be a tough job. There is a serious need for administration tools allowing analysis and inference on access control policies. Such tools should help security officers to avoid defining conflicting constraints and inconsistent policies.This paper shows that theoretical tools from relational databases are suitable for expressing and inferring on RBAC policies and their related constraints. We focused on using Constrained Tuple-Generating Dependencies (CTGDs), a class of dependencies which includes traditional other ones. We show that their great expressive power is suitable for all practical relevant aspects of RBAC. Moreover, proof procedures have been developed for CTGDs: they permit to reason on policies. For example, to check their consistency, to verify a new rule is not already implied or to check satisfaction of security properties. A prototype of RBAC policies management tool has been implemented, using CTGDs dedicated proof procedures as the underlying inference engine.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-2003" status="VALID">
          <idno type="IdRef">149705271</idno>
          <idno type="ISNI">0000000122577669</idno>
          <idno type="RNSR">200511875R</idno>
          <idno type="ROR">https://ror.org/04dv4he91</idno>
          <orgName>Laboratoire d'InfoRmatique en Image et Systèmes d'information</orgName>
          <orgName type="acronym">LIRIS</orgName>
          <date type="start">2003-01-01</date>
          <desc>
            <address>
              <addrLine>Bâtiment Blaise Pascal - 20, avenue Albert Einstein - 69621 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://liris.cnrs.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-33804" type="direct"/>
            <relation active="#struct-126765" type="direct"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-194495" type="direct"/>
            <relation active="#struct-219748" type="direct"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation name="UMR5205" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-33804" status="VALID">
          <idno type="IdRef">02640334X</idno>
          <idno type="ISNI">0000 0001 2188 0906</idno>
          <idno type="ROR">https://ror.org/03rth4p18</idno>
          <idno type="Wikidata">Q4041</idno>
          <orgName>Université Lumière - Lyon 2</orgName>
          <orgName type="acronym">UL2</orgName>
          <desc>
            <address>
              <addrLine>86, rue Pasteur - 69007 Lyon</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lyon2.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-126765" status="VALID">
          <idno type="ROR">https://ror.org/05s6rge65</idno>
          <orgName>École Centrale de Lyon</orgName>
          <orgName type="acronym">ECL</orgName>
          <desc>
            <address>
              <addrLine>36 avenue Guy de Collongue - 69134 Ecully cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ec-lyon.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301088" status="VALID">
          <idno type="ROR">https://ror.org/01rk35k63</idno>
          <orgName>Université de Lyon</orgName>
          <desc>
            <address>
              <addrLine>92 rue Pasteur - CS 30122, 69361 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-lyon.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-194495" status="VALID">
          <idno type="IdRef">026402823</idno>
          <idno type="ISNI">0000000121686185</idno>
          <idno type="ROR">https://ror.org/029brtt94</idno>
          <orgName>Université Claude Bernard Lyon 1</orgName>
          <orgName type="acronym">UCBL</orgName>
          <desc>
            <address>
              <addrLine>43, boulevard du 11 novembre 1918, 69622 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lyon1.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-219748" status="VALID">
          <idno type="IdRef">052444724</idno>
          <idno type="ISNI">0000 0001 2292 0228</idno>
          <orgName>Institut National des Sciences Appliquées de Lyon</orgName>
          <orgName type="acronym">INSA Lyon</orgName>
          <date type="start">1957-03-18</date>
          <desc>
            <address>
              <addrLine>20 Avenue Albert Einstein, 69621 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
            <relation active="#struct-301232" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>