Abstract:Role-based Access Control (RBAC) become an important techniques to secure e-commerce systems during recent years. However, RBAC management issue is still an unresolved problem. Moreover, with the development of IT technologies in many departments, there emerge many group communications which require dynamic user-role assignments. In these scenarios it is infeasible for few security officers to administrate the assignment for local variant applications. In this paper, we propose a novel RBAC model for decentralized and distributed systems. We also present an administration model of our PBAC model to address the management issues in traditional RBAC systems. As one of the main contributions, this paper proposes a decentralized administration model by introducing a component of group assignment to implement a novel user authorization mechanism and a new user-role assignment (UA) approach which provides a two-level administration for user and role management through the concept of group. Our model can be applied for the current group communication applications with dynamic assignments where typically local administrators take charge of the dynamic assignments. In this way, many administrative tasks for different applications can spread over many different local administrators, and a fine-grained administration model of RBAC based on the local administration policies is realized. As a proof-of-concept we implemented a prototype in Xen virtualization environment based on our proposed model to secure real distributed applications.

Role-based Network Dynamic Delegation Model's Research and Realization

An Enhanced Role-based Delegation Model

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A New Research of Delegation Agent Model Based On RBAC

A Constrained Role-Based Delegation Model

Research Of Modeling Methods For Amr Pipeline Navigating System

Dynamic Authorization Scheme Based on Delegation in Distributed System

Norm Based Framework toward Modeling and Designing of Trusted Collaborative Systems

An Authorization Delegation Model Based on User Security Levels

Delegation Management Modeling in a Security Policy based Environment

Managing Delegation in Access Control Models

RBAC based access control model for services compositions cross multiple enterprises

Key Technology of Hierarchical Management by Delegation for Network Based on Absolute Agent

Role-extended-based RBAC model

Conditional Delegation Model Based on Weighted Roles for Workflow

A Decentralized Rbac Model And Its User-Role Administration

Modeling and Verification of Dynamic Management of Cooperative Permission Based on Colored Petri Nets

Modeling Delegation Through an I*-Based Approach

Research and implementation of role-based RBAC administration model

Web-Based Delegation Using Xml

A New Dynamic Hierarchical RBAC Model for Web Services