- Title
- Reasoning about dynamic delegation in role based access control systems
- Creator
- Ruan, Chun; Varadharajan, Vijay
- Relation
- 16th International Conference on Database Systems for Advanced Applications (DASFAA 2011). Database Systems for Advanced Applications: 16th International Conference, DASFAA 2011 Hong Kong, China, April 22-25, 2011 Proceedings, Part I (Hong Kong 22-25 April, 2011) p. 239-253
- Publisher Link
- http://dx.doi.org/10.1007/978-3-642-20149-3_19
- Publisher
- Springer
- Resource Type
- conference paper
- Date
- 2011
- Description
- This paper proposes a logic based framework that supports dynamic delegation for role based access control systems in a decentralised environment. It allows delegation of administrative privileges for both roles and access rights between roles. We have introduced the notion of trust in delegation and have shown how extended logic programs can be used to express and reason about roles and their delegations with trust degrees, roles’ privileges and their propagations, delegation depth as well as conflict resolution. Furthermore, our framework is able to enforce various role constraints such as separation of duties, role composition and cardinality constraints. The proposed framework is flexible and provides a sound basis for specifying and evaluating sophisticated role based access control policies in decentralised environments.
- Subject
- delegation; access control systems; role based access control systems; decentralised environments
- Identifier
- http://hdl.handle.net/1959.13/1355906
- Identifier
- uon:31558
- Identifier
- ISBN:9783642201486
- Language
- eng
- Reviewed
- Hits: 812
- Visitors: 813
- Downloads: 0
| Thumbnail | File | Description | Size | Format |
|---|