Abstract:Role-based Access Control (RBAC) become an important techniques to secure e-commerce systems during recent years. However, RBAC management issue is still an unresolved problem. Moreover, with the development of IT technologies in many departments, there emerge many group communications which require dynamic user-role assignments. In these scenarios it is infeasible for few security officers to administrate the assignment for local variant applications. In this paper, we propose a novel RBAC model for decentralized and distributed systems. We also present an administration model of our PBAC model to address the management issues in traditional RBAC systems. As one of the main contributions, this paper proposes a decentralized administration model by introducing a component of group assignment to implement a novel user authorization mechanism and a new user-role assignment (UA) approach which provides a two-level administration for user and role management through the concept of group. Our model can be applied for the current group communication applications with dynamic assignments where typically local administrators take charge of the dynamic assignments. In this way, many administrative tasks for different applications can spread over many different local administrators, and a fine-grained administration model of RBAC based on the local administration policies is realized. As a proof-of-concept we implemented a prototype in Xen virtualization environment based on our proposed model to secure real distributed applications.

OB4LAC: an Organization-based Access Control Model for E-government System

A Task-Role Based Access Control Model with Multi-Constraints

OBJECT-BASED ACCESS CONTROL MODEL

Flexible Organization Structure-Based Access Control Model and Application

Full Business Model Oriented Access Control Method

WARBAC: Improved Administrative Model of Role-Based Access Control

Organization and Role-Based Access Control Model

Resource and Attribute Based Access Control Model for System with Huge Amounts of Resources.

A Flexible Access Control Model for Enterprise Information Management Systems

A model for role administration using organization structure

A MULTI-POLICY SERVICES-ORIENTED ATTRIBUTE-BASED ROLE-BASED ACCESS CONTROL MODEL

Realization Distributed Access Control Based on Ontology and Attribute with OWL

A BLP-Based Model for Hierarchical Orgnizations

UARBAC-A new model of access control and its Application

Extended Access Control Model Based on RBAC

A Decentralized Rbac Model And Its User-Role Administration

Formal Specification for Object-oriented Model of Role-based Access Control

An Extended Access Control Model Based on Roles and Departments

An Extended Role-Based Access Control Model and Method

DESIGN AND IMPLEMENTATION OF RESOURCE OWNERS-ORIENTED ACCESS CONTROL MODEL

Access Control Model Based on JAAS Enterprise