A Flexible Role- and Resource-Based Access Control Model

RBAC realizes the separation of duty and helps to manage the users with various roles. However, RBAC cannot work well in distributed environment. In this paper, a flexible role- and resource- based access control model (called RRBAC) is proposed. RRBAC introduces role and resource concepts to access control, and provides a flexible approach for many security domains. RRBAC supports different types of resources sharing in open distributed environment. In the paper, we have a detailed description of RRBAC. Thereto, a use case is given to show how the model works, which illustrates that RRBAC is sound and reasonable.