Abstract:Role-based Access Control (RBAC) become an important techniques to secure e-commerce systems during recent years. However, RBAC management issue is still an unresolved problem. Moreover, with the development of IT technologies in many departments, there emerge many group communications which require dynamic user-role assignments. In these scenarios it is infeasible for few security officers to administrate the assignment for local variant applications. In this paper, we propose a novel RBAC model for decentralized and distributed systems. We also present an administration model of our PBAC model to address the management issues in traditional RBAC systems. As one of the main contributions, this paper proposes a decentralized administration model by introducing a component of group assignment to implement a novel user authorization mechanism and a new user-role assignment (UA) approach which provides a two-level administration for user and role management through the concept of group. Our model can be applied for the current group communication applications with dynamic assignments where typically local administrators take charge of the dynamic assignments. In this way, many administrative tasks for different applications can spread over many different local administrators, and a fine-grained administration model of RBAC based on the local administration policies is realized. As a proof-of-concept we implemented a prototype in Xen virtualization environment based on our proposed model to secure real distributed applications.

Research and Implementation of Access Control Management Based on RBAC of Informational Platform

Practical Way to Implement Role-Based Access Control in Security Administration System

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

Method of Information System Authority Control Based on RBAC in Web Environment

Design and Implementation of Privilege Management System Based on RBAC

Method of Finely Granular Access Control Based on RBAC

Extended Access Control Model Based on RBAC

Design and Development of Permission Management System Based on RBAC

Research on the security model of software management based on RBAC

Research and Implementation on Access Control of Management-Type SaaS

Implementation of Role-Based Access Control Mechanism Based on Enterprise Fundamental Information Platform

Implementation and Application of Role-Based Access Control

Research and implementation of role-based RBAC administration model

Realization Method about Access Control of System Based on Web

Implementation of a J2EE-Based Access Control Framework

An improved mechanism of authorization control based on Web environment

DRBAC based access control method in substation automation system

Research and implement on access control for mobile business platform based on ASP

The Design and Implementation of the Complicated Resource System Based on RBAC Model

A Hierarchical Access Control Model of Software Repository Based on Rbac

A Decentralized Rbac Model And Its User-Role Administration