Abstract:In information systems where there are a large number of different resources and the resource attributes change frequently, the security, reliability and dynamics of access permissions should be guaranteed. The changing raises security concerns related to authorization, and access control, but existing access control models are difficult to meet practical requirements. In this paper, a resource and attribute based access control model named RA-BAC was proposed. The model bases on attribute-based access control (ABAC) and links access control policy with resource, and redefines the access control rules. Besides, we compare RA-BAC and ABAC from the perspective of theory and simulation experiment respectively to show the advantage of RA-BAC model. We give a detailed analysis combining with instances to show the practicability of the RA-BAC model. RA-BAC solves the problems of policy conflict and policy library expansion in the ABAC model when there are too many resources and the attributes of resources are changed frequently in the system. Using RA-BAC model in system can makes permission query efficient and reduce workload of the system administrator of managing the policy library.

Research of Spatial Constrained Access Control Based on Attribute and Role

The research for spatial role-based access control model

A Task-Role Based Access Control Model with Multi-Constraints

Using Semantic Web Technologies to Specify Constraints of RBAC

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

Ontology-Based RBAC specification for interoperation in distributed environment

Realization Distributed Access Control Based on Ontology and Attribute with OWL

WARBAC: Improved Administrative Model of Role-Based Access Control

Securing Role-Based Distributed Collaboration System

Semantic-Aware Access Control for Grid Application

A Team-role-based Document Access Control Model

The fine-grained security access control of spatial data

RBAC based access control model for services compositions cross multiple enterprises

Extended Access Control Model Based on RBAC

Resource and Attribute Based Access Control Model for System with Huge Amounts of Resources.

XACML-based Access Control and RBAC Constraints

The research of semantic similarity algorithm consideration of multi-factor ontology-based in access control

Realization Method about Access Control of System Based on Web

Multilevel Multi-policy Access Control Model for Collaborative Application

An Extended Access Control Model Based on Roles and Departments