DocumentCode :
3215757
Title :
Synchronization of Transactions to Prevent Illegal Information Flow in a Role-Based Access Control Model
Author :
Enokido, Tomoya ; Takizawa, Makoto
Author_Institution :
Rissho Univ., Tokyo
fYear :
2008
fDate :
25-28 March 2008
Firstpage :
779
Lastpage :
786
Abstract :
The role-based access control (RBAC) model is widely used to make information systems secure. Even if every access request is authorized in the roles, illegal information flow might occur as the well known confinement problem. In this paper, we discuss how to prevent illegal information flow to occur by synchronizing conflicting transactions in the RBAC model. We first define types of information flow relations, legal (LIF), illegal (IIF), and possibly illegal (PIF) ones R1 = R2, R1 rarr R2, and R1 rarr R2 among a pair of role families R and Ri, respectively. Here, let T1 and T2 be a pair of transactions with role families R1 and R2 respectively. Suppose T1 precedes T2 in a schedule, i.e. for every pair of conflicting methods op and opi from T andT% respectively, op is performed prior to op2- Here, if the LIF relation R1 = R2 holds, no illegal information flow occur. If R1 rarr R2, illegal information flow necessarily occur. R1 rarr R2 implies that illegal information flow might occur depending on in which order the transactions perform what methods.
Keywords :
authorisation; synchronisation; transaction processing; RBAC; confinement problem; illegal information flow prevention; role-based access control; secure information systems; transaction synchronization; Access control; Data security; Database systems; Information security; Information systems; Law; Legal factors; Permission; Protocols; Confinement problem; Information Flow; Rrole-based access control;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Advanced Information Networking and Applications, 2008. AINA 2008. 22nd International Conference on
Conference_Location :
Okinawa
ISSN :
1550-445X
Print_ISBN :
978-0-7695-3095-6
Type :
conf
DOI :
10.1109/AINA.2008.145
Filename :
4482785
Link To Document :
بازگشت