Abstract:Role-Based Access Control (RBAC) has become a popular technique for security purposes with increasing accessibility of information and data, especially in large-scale enterprise environments. However, authorization management in dynamic and ad-hoc collaborations between different groups or domains in these environments is still an unresolved problem. Traditional RBAC models cannot solve this problem because they cannot support security policy composition from different groups, and lack efficient administrative models for dynamic collaborations. In this paper, we propose a group-based RBAC model (GB-RBAC) for secure collaborations which is based on RBAC96 and extended with group concept to capture dynamic users and permissions. We propose a decentralized security administrative model for GB-RBAC to address the management issues of RBAC in collaborations. As a unique property, our model supports two levels of authorization management: global or system level management by system administrators and local or group level management by group administrators. In this way, our model implements the principles of management autonomy and separation of duty (SoD) in security administrations. We apply our model for authorization management in collaborations by introducing the concept of virtual group. A virtual group is built for a collaboration between multi-groups, where all members build trust relation within the group and are authorized to join and perform operations for the collaborative work. Compared with existing work, our model supports dynamic and ad-hoc collaborations in large-scale systems with the properties of controllable, decentralized, and fine-grained security management.

On attribute-based usage control policy ratification for cooperative computing context

Ontology-Based RBAC specification for interoperation in distributed environment

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Multilevel Multi-policy Access Control Model for Collaborative Application

A Formal Language for Access Control Policies in Distributed Environment

Ontology-Based Conceptual Modeling Of Policy-Driven Control Framework: Oriented To Multi-Agent System For Web Services Management

Enforcing Enterprise-wide Policies over Standard Client-Server Interactions.

An Architecture Approach To Dynamic Policy In Rbac

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

A Model Based on Domain for Access Control Policy Refinement and Its Implementation

A Rigorous Framework for Specification, Analysis and Enforcement of Access Control Policies

Access Control in Peer-to-Peer Collaborative Systems

FLAP -- A Federated Learning Framework for Attribute-based Access Control Policies

Towards Attribute-Based Authorisation for Bidirectional Programming

Federated Access Management for Collaborative Network Environments: Framework and Case Study.

An Authorization Model for Collaborative Access Control

Using Semantics for Dynamic Access Control of XML Documents in Dynamic Coalition Environment.

Model for access control policy refinement based on domain and its implementation

An Improved Scheme for Delegation Based on Usage Control

Towards Secure Dynamic Collaborations with Group-Based RBAC Model

Relationships, Paths and Principal Matching: A New Approach to Access Control