Abstract:Role-Based Access Control (RBAC) has become a popular technique for security purposes with increasing accessibility of information and data, especially in large-scale enterprise environments. However, authorization management in dynamic and ad-hoc collaborations between different groups or domains in these environments is still an unresolved problem. Traditional RBAC models cannot solve this problem because they cannot support security policy composition from different groups, and lack efficient administrative models for dynamic collaborations. In this paper, we propose a group-based RBAC model (GB-RBAC) for secure collaborations which is based on RBAC96 and extended with group concept to capture dynamic users and permissions. We propose a decentralized security administrative model for GB-RBAC to address the management issues of RBAC in collaborations. As a unique property, our model supports two levels of authorization management: global or system level management by system administrators and local or group level management by group administrators. In this way, our model implements the principles of management autonomy and separation of duty (SoD) in security administrations. We apply our model for authorization management in collaborations by introducing the concept of virtual group. A virtual group is built for a collaboration between multi-groups, where all members build trust relation within the group and are authorized to join and perform operations for the collaborative work. Compared with existing work, our model supports dynamic and ad-hoc collaborations in large-scale systems with the properties of controllable, decentralized, and fine-grained security management.

Ts-RBAC: A RBAC Model with Transformation

A Task-Role Based Access Control Model with Multi-Constraints

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A Model of Task-Role Based Access Control and Its Application

A Team-role-based Document Access Control Model

An Expanded Role-Based Access Control Model

Selective Regression Test for Access Control System Employing RBAC

Kind of user behaviour trust and role based dynamic access control model

RBAC Extension and Its Application

A trustworthiness- and context-based access control model for open systems

Access Control Model Based on Role and Attribute and Its Implementation

Extended Access Control Model Based on RBAC

A Role-Based Access Control Model that Supports Authorization with The Combination of Static and Dynamic

A Decentralized Rbac Model And Its User-Role Administration

A Survey of Aeneral Temporal RBAC Studying

RBAC delegation model research based on time

Task-based Dynamic Constraint Relations among Roles

A Fine Grained RBAC Model Supporting Flexible Administrative Separation of Duty

Role-based access control model with spatio-temporal constraint

Trust-degree and attributes based RBAC authorization model

Towards Secure Dynamic Collaborations with Group-Based RBAC Model