An Access Rights Administration Model in Role-Based Security Systems

Access control is a difficult security problem for an information system. RBAC model is a well known and recognized as a good security model for it. Though RBAC is a good model, administration of RBAC including building and maintaining access control information remains a difficult problem in large companies. A hierarchy role tree (HRT)-based administration model of RBAC in an enterprise environment is proposed. This HRT-based administration method allows security administrators to manage access control by a tree structure called HRT which reflects their relationship within their organization. It helps to build a team collaboration in RBAC administration between administrator and subadministrators. Moreover, by the new model, system can express DSD by a tree-based data structure, and this will greatly reduce the system complex in running time.