An Efficient Algorithm of Role Mapping across Security Domains in Data-Sharing Environments

There are many distributed, autonomous, heterogeneous and dynamic data sources in data sharing environment. In order to achieve the goal of global data sharing without compromising the security of local domain respectively, it is necessary to establish an access control mechanism to satisfy the security need of data sharing across multi-domain. In this paper, a criterion based algorithm for role mapping across multi-domain is proposed. The algorithm not only resolves the conflicts of cyclic inheritance and separation of duties, but also makes the establishment of role mapping more efficiently by preserving the historical information of role mapping paths established successfully before. Evaluation by access instances shows that the algorithm meets the demands of access control in multi-domains and scales very well.