A Framework for Modeling Organization Structure in Role Engineering

Lee, HyungHyo; Lee, Young-Lok; Noh, Bong-Nam

doi:10.1007/11558958_123

Cited by 6 publications

(3 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Furthermore, in each unit of the organization, there are job positions, such as general manager or assistant general manager, to perform specific tasks and responsibilities. Therefore, the organization's structure provides important authorization information to security analysts in the role engineering process (Lee, Lee, & Noh, 2006).…”

Section: The Proposed Infrastructure and Role Decomposition Processmentioning

confidence: 99%

A Role Engineering Framework to Support Dynamic Authorizations in Collaborative Environments

Baltatzis

Ilioudis

Pangalos

2012

Information Security Journal: A Global Perspective

View full text Add to dashboard Cite

With the increasing availability of networks and the advancements in their underlying infrastructure of mobile devices, access control and authorization issues will be enablers of future technologies in collaborative environments. Recent works demonstrate efforts to dynamically authorize users without prior knowledge and with no security configuration attributes or roles previously assigned to them. Moreover, current role-based engineering approaches construct role hierarchies without reflecting the organizational structure, since they do not take into account structural organizational characteristics. In this paper we propose an innovative role structure, not solely dependent on naming methods but also that takes into account organizational as well as functional characteristics to provide a practical role assignment methodology between organizations in a collaborative environment. More specifically, we argue that beyond the fact that a role represents a job assignment to perform certain function(s), it is also a composite element representing several organizational characteristics such as organizational function, organizational domain and level of authority. The proposed role structure enables role-to-role assignment as external nonlocal users request access in a particular information system (e.g., people on the move, users logged in from a collaborative organization) and acquire local role(s). A clear advantage in the proposed framework is its flexibility in the role assignment process, since the proposed role decomposition does not require an exact match of predefined credentials. The methodology is autonomous, as no prior trust establishment is required between interactive organizations, expendable as new organizations can join the collaboration without affecting the existing ones, flexible as it does not affect the local access control policy, scalable as the collaboration can increase arbitrary and efficient as the comparison methodology guarantees the selection of the appropriate local role, if such one exists.

show abstract

Section: The Proposed Infrastructure and Role Decomposition Processmentioning

confidence: 99%

A Role Engineering Framework to Support Dynamic Authorizations in Collaborative Environments

Baltatzis

Ilioudis

Pangalos

2012

Information Security Journal: A Global Perspective

View full text Add to dashboard Cite

show abstract

“…Role hierarchies are partial orders that express inheritance relations among roles. Although role hierarchies in RBAC can reflect some points from organizational structures, the functional role hierarchy constructed through the existing role engineering approaches does not reflect organizational structures, because they do not take into account the structural characteristics of organizations [19]. Hierarchies in RBAC implement the is-a relationships between hierarchical roles.…”

Section: Extensions To Rbacmentioning

confidence: 99%

OSDM: An Organizational Supervised Delegation Model for RBAC

Nassr

Aboudagga²,

Steegmans

2012

Lecture Notes in Computer Science

View full text Add to dashboard Cite

The dynamic nature of operations in organizations has led to an interest in roles and permissions delegation to enable a seamless continuity of business. Delegation involves assigning a given set of access rights from one user to another. In existing role delegation models, delegation is often authorized and controlled by a relation that specifies who can delegate to whom. The usage of such relations in delegation models has some disadvantages; such as complexity of maintenance, error proneness, inconsistencies and inabilities to define some organizational policies related to delegation. In this paper, we propose a new delegation model that depends on organizational lines of authority to authorize and control delegation. The main advantages of this approach are that it simplifies the management of delegation authorization and complies with organizational behavior. Furthermore, it eliminates inconsistencies related to changes to roles and permissions.

show abstract

“…To the people who use organizational applications, RBAC can assign permissions for specific tasks to a role or a role group instead of directly assigning them to users one by one [2] [3]. Therefore, RBAC has advantages such as easy access assignment and management especially when a new user is added, a department of a user is changed, and common tasks for a set of users should be allocated.…”

Section: Introductionmentioning

confidence: 99%

Access Control Using Extended Role Graph Corresponding to Organizational Hierarchy

Lee

Kang

Hur

2011

2011 First ACIS/JNU International Conference on Computers, Networks, Systems and Industrial Engineering

View full text Add to dashboard Cite

Changes should continuously occur to enterprise applications whenever organizational structure and business processes are changed. However, the application modification means that the access control modules become more complicated in order to control application users, roles for users, and permissions depending on roles of an organization. This problem was tackled traditionally with the access control mechanism. However, the RoleBased Access Control (RBAC) is recently more actively being researched as a superior mechanism. In this paper, we propose the Extended Role Graph (ERG) approach for assigning and inherit permissions to enhance the RBAC mechanism. The ERG method overcomes the limitations in the existing RBAC and provides a more solid workflow security.

show abstract

A Framework for Modeling Organization Structure in Role Engineering

Cited by 6 publications

References 8 publications

A Role Engineering Framework to Support Dynamic Authorizations in Collaborative Environments

A Role Engineering Framework to Support Dynamic Authorizations in Collaborative Environments

OSDM: An Organizational Supervised Delegation Model for RBAC

Access Control Using Extended Role Graph Corresponding to Organizational Hierarchy

Contact Info

Product

Resources

About