Abstract:Role-based Access Control (RBAC) become an important techniques to secure e-commerce systems during recent years. However, RBAC management issue is still an unresolved problem. Moreover, with the development of IT technologies in many departments, there emerge many group communications which require dynamic user-role assignments. In these scenarios it is infeasible for few security officers to administrate the assignment for local variant applications. In this paper, we propose a novel RBAC model for decentralized and distributed systems. We also present an administration model of our PBAC model to address the management issues in traditional RBAC systems. As one of the main contributions, this paper proposes a decentralized administration model by introducing a component of group assignment to implement a novel user authorization mechanism and a new user-role assignment (UA) approach which provides a two-level administration for user and role management through the concept of group. Our model can be applied for the current group communication applications with dynamic assignments where typically local administrators take charge of the dynamic assignments. In this way, many administrative tasks for different applications can spread over many different local administrators, and a fine-grained administration model of RBAC based on the local administration policies is realized. As a proof-of-concept we implemented a prototype in Xen virtualization environment based on our proposed model to secure real distributed applications.

Cross-platform Authorization Based on Role-Mapping

A Task-Role Based Access Control Model with Multi-Constraints

Role Based Cross-Project Collaboration in Multiple Distributed Software Design Projects

A Semantic and Trust Based Framework for Rbac User-Role Assignment

RBAC based access control model for services compositions cross multiple enterprises

Access control mechanism of cooperation-oriented flexible workflow

Research and Application of Cross-Domain Data Authorization and Operation

Securing Role-Based Distributed Collaboration System

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

Security Violation Detection for Role-Based Access Control Based Interoperation in Distributed Environment

Ontology-Based RBAC specification for interoperation in distributed environment

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A Role Mapping Mechanism for RBAC-Based Multi-Domains

Role Engineering with SKAOS for Systems Employing RBAC

A Decentralized Rbac Model And Its User-Role Administration

An ASP Based Approach of Inter-Domain Role Mapping

Workflow Dynamic Authorization Model with Role-Based Access Control

An Authorization Model without Central Authority for Service Collaboration

ROLE-BASED ACCESS CONTROL MODEL FOR ADAPTIVE WORKFLOW SYSTEMS

Multi-tenancy Authorization Models for Collaborative Cloud Services

Authorization Constraint Method in Workflow Management Systems Based on RBAC