Abstract:Role-based Access Control (RBAC) become an important techniques to secure e-commerce systems during recent years. However, RBAC management issue is still an unresolved problem. Moreover, with the development of IT technologies in many departments, there emerge many group communications which require dynamic user-role assignments. In these scenarios it is infeasible for few security officers to administrate the assignment for local variant applications. In this paper, we propose a novel RBAC model for decentralized and distributed systems. We also present an administration model of our PBAC model to address the management issues in traditional RBAC systems. As one of the main contributions, this paper proposes a decentralized administration model by introducing a component of group assignment to implement a novel user authorization mechanism and a new user-role assignment (UA) approach which provides a two-level administration for user and role management through the concept of group. Our model can be applied for the current group communication applications with dynamic assignments where typically local administrators take charge of the dynamic assignments. In this way, many administrative tasks for different applications can spread over many different local administrators, and a fine-grained administration model of RBAC based on the local administration policies is realized. As a proof-of-concept we implemented a prototype in Xen virtualization environment based on our proposed model to secure real distributed applications.

An Improved Scheme for Delegation Based on Usage Control

A Task-Role Based Access Control Model with Multi-Constraints

An Efficient Delegation-Based Anonymous Authentication Protocol

Design and Implementation of Unified Access Control System Based on LDAP

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

Multi-level Access Control for Collaborative CAD

Separation of Duty Constraint for Permission Based Delegation Model

Managing Delegation in Access Control Models

Realization of UCON Model Based on Extended-XACML

On attribute-based usage control policy ratification for cooperative computing context

A Decentralized Rbac Model And Its User-Role Administration

An Extended Access Control Model Based on Roles and Departments

Towards a Dynamic Multi-Policy Dissemination Control Model: (DMDCON).

A Model for Dynamic Access Control of XML Documents Using Semantics

Identity-based controlled delegated outsourcing data integrity auditing scheme

Using trust for restricted delegation in grid environments

Model for access control policy refinement based on domain and its implementation

An Improved Concurrency Control Algorithm of Cooperative Design Document Based on Marking.

Distributed access control in CROWN groups

A Implement of Access Control Based Multi-Polices Using XML

An Action-Based Fine-Grained Access Control Mechanism for Structured Documents and Its Application