• DocumentCode
    2695812
  • Title

    A transitive access control model for dynamic roles and attributes

  • Author

    Evered, Mark

  • Author_Institution
    Sch. of Sci. & Technol., Univ. of New England, Armidale, NSW, Australia
  • fYear
    2012
  • fDate
    26-28 June 2012
  • Firstpage
    117
  • Lastpage
    121
  • Abstract
    Role-based access control (RBAC) has gained popularity for the expression of access constraints in information systems but existing RBAC models do not provide sufficient expressive power to support the kinds of fine-grained access control often required. In this paper, we define a new formal model for RBAC which supports controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.
  • Keywords
    authorisation; information systems; RBAC; access constraints; dynamic roles; formal model; information systems; object attributes; role appointment; role-based access control; subject roles; transitive access control model; transitive role-attribute derivation relationship; Authorization; Information systems; Labeling; Medical services; Permission; access control; attribute; model; role; security;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Cyber Security, Cyber Warfare and Digital Forensic (CyberSec), 2012 International Conference on
  • Conference_Location
    Kuala Lumpur
  • Print_ISBN
    978-1-4673-1425-1
  • Type

    conf

  • DOI
    10.1109/CyberSec.2012.6246105
  • Filename
    6246105