Abstract:The requirement to develop an organization makes collaboration with other organizations necessary, so the organizations can share resources to perform common tasks. Different organizational domains use different access control models to protect their resources from unauthorized access. Organizational collaboration is an important goal for distributed computing paradigms, but policy inconsistencies between domains will cause problems in a collaboration model that add to the problems involved in constructing the collaboration model itself. These problems provide the two challenges that motivate the research presented here: (1) the construction of a collaboration model across multiple domains protected by different access control models; and (2) ensuring that the access control policy used by a participating domain contains no inconsistencies. We also present our new approach to solving the inter-domain role mapping (IDRM) problem, i.e., to determine the minimal role set that covers requested permissions from a collaborating domain. We also analyse our algorithms, present the results of our tests, and compare our results with the results of existing approaches. DOI: http://dx.doi.org/10.5755/j01.itc.45.3.13187

Approach for Resolution of Exceptional Conflicts in Authorization

The research for spatial role-based access control model

Conflict Checking and Solving of Separation of Duty Constraints in RBAC

Access control mechanism of cooperation-oriented flexible workflow

Detecting Conflict of Permissions in RBAC Model with Semantic Approach

Conflict Detection and Resolution for Authorization Policies in Workflow Systems

Analyses of Conflict among Exception in Multi-Agent System and an Integrated Management Mechanism

Separation of Duty Constraint for Permission Based Delegation Model

Research on A Fine-Grained Overriding Mechanism Based on Delegation

A first-order logic based approach for authorization with the treatment ofpolicy inconsistency

A DL-Based Approach for Eliminating Concept Restriction Conflicts in Ontology Merging

An Action-Based Fine-Grained Access Control Mechanism for Structured Documents and Its Application

Towards a systematic conflict resolution policy in multi-agent system: a conceptual framework

An Authorization Model for Collaborative Access Control

Scalability Enhanced Active-Passive-integrated Access Control Model

Specification of Role-Based Authorization Constraints in Workflow Management Systems

Approaches to Access Control Policy Comparison and the Inter-Domain Role Mapping Problem

Conflict Resolution for Structured Merge Via Version Space Algebra

A Revision-Based Approach to Resolving Conflicting Information.

An Authorization Model without Central Authority for Service Collaboration

An Argumentation-Based Approach To Handling Inconsistencies In Dl-Lite