Abstract:Role-Based Access Control (RBAC) has become a popular technique for security purposes with increasing accessibility of information and data, especially in large-scale enterprise environments. However, authorization management in dynamic and ad-hoc collaborations between different groups or domains in these environments is still an unresolved problem. Traditional RBAC models cannot solve this problem because they cannot support security policy composition from different groups, and lack efficient administrative models for dynamic collaborations. In this paper, we propose a group-based RBAC model (GB-RBAC) for secure collaborations which is based on RBAC96 and extended with group concept to capture dynamic users and permissions. We propose a decentralized security administrative model for GB-RBAC to address the management issues of RBAC in collaborations. As a unique property, our model supports two levels of authorization management: global or system level management by system administrators and local or group level management by group administrators. In this way, our model implements the principles of management autonomy and separation of duty (SoD) in security administrations. We apply our model for authorization management in collaborations by introducing the concept of virtual group. A virtual group is built for a collaboration between multi-groups, where all members build trust relation within the group and are authorized to join and perform operations for the collaborative work. Compared with existing work, our model supports dynamic and ad-hoc collaborations in large-scale systems with the properties of controllable, decentralized, and fine-grained security management.

Privacy-aware RBAC Model for Web Services Composition

Privacy Policy Composition Of Privacy-Aware Rbac Model For Composite Web Services

A Task-Role Based Access Control Model with Multi-Constraints

Privacy-Aware Web Services Selection and Composition

RBAC based access control model for services compositions cross multiple enterprises

Ontology-Based RBAC specification for interoperation in distributed environment

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Policy Conflict Detection in Composite Web Services with RBAC

A General Attribute Based RBAC Model for Web Service

A New Dynamic Hierarchical RBAC Model for Web Services

Providing Ontology-Based Privacy-Aware Data Access Through Web Services and Service Composition.

Role-Based Access Control System for Web Services

Efficient Authorization of Rich Presence Using Secure and Composed Web Services

An Extended Role-Based Access Control for Web Services.

Towards Secure Dynamic Collaborations with Group-Based RBAC Model

Dynamic Role-based Access Control for Web Services Using Context and Trust

The Implementation of Role-Based Access Control on the Web

An Extended RBAC Model for Web Services in Business Process

Using Semantic Web Technologies to Specify Constraints of RBAC

A Purpose-Involved Role-Based Access Control Model

Research and Practice of DataRBAC-based Big Data Privacy Protection