A New Role-Based Authorization Model in a Corporate Workflow Systems*

Lee, HyungHyo; Lee, SeungYong; Noh, Bong-Nam

doi:10.1007/978-3-540-24707-4_82

Cited by 2 publications

(4 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The extended inheritance would not only inherit public permissions but also private permissions, which went against the security policy that self-governing branches could be allowed to have partial autonomy. Lee et al [13] proposed RPI-RBAC (Restricted Permission Inheritance RBAC) model, which ensured partial inheritance by dividing each common role into multiple sub-roles. Although RPI-RBAC can reflect diverse role relationships to a certain extent and prevent private or sensitive right from being inherited by senior role unconditionally, the sub-role was obtained from the division of role based on job functions and ways of role inheritance, therefore, the model could not take the differences of permission types and properties into consideration.…”

Section: Related Workmentioning

confidence: 99%

“…1 as an example, we compare ATRBAC model with other three models: RBAC 2 [4], EHRBAC [12] and RPI-RBAC [13] in the following properties [9], as shown in Table 2. The notation 'O' means that the model can easily achieve the property.…”

Section: Model Analysismentioning

confidence: 99%

“…1 (see Fig. 5), the atom role AR 13 will inherit all permissions of the atom role AR 11 since AR 13 AR 11 .…”

Section: Model Analysismentioning

confidence: 99%

See 2 more Smart Citations

Atom-Role-Based Access Control Model

Cai

Huang

Hou

et al. 2012

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

SUMMARYRole-based access control (RBAC) model has been widely recognized as an efficient access control model and becomes a hot research topic of information security at present. However, in the large-scale enterprise application environments, the traditional RBAC model based on the role hierarchy has the following deficiencies: Firstly, it is unable to reflect the role relationships in complicated cases effectively, which does not accord with practical applications. Secondly, the senior role unconditionally inherits all permissions of the junior role, thus if a user is under the supervisor role, he may accumulate all permissions, and this easily causes the abuse of permission and violates the least privilege principle, which is one of the main security principles. To deal with these problems, we, after analyzing permission types and role relationships, proposed the concept of atom role and built an atom-role-based access control model, called ATRBAC, by dividing the permission set of each regular role based on inheritance path relationships. Through the application-specific analysis, this model can well meet the access control requirements.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Model Analysismentioning

confidence: 99%

See 1 more Smart Citation

Atom-Role-Based Access Control Model

Cai

Huang

Hou

et al. 2012

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

show abstract

“…Consequently, senior positions are granted minimal privileges. We refer the reader to [19] for the four categories of tasks.…”

Section: Task Constraintmentioning

confidence: 99%

A Task-Role Based Access Control Model with Multi-Constraints

Yao

Kong

2008

2008 Fourth International Conference on Networked Computing and Advanced Information Management

View full text Add to dashboard Cite

Although RBAC models have received broad support as a generalized approach to access control, the administration of roles in large organizations can become quite cumbersome. In this paper, we develop a new paradigm for access control and authorization management, called task-role based access control(T-RBAC) with multi-constraint. The basic idea of this model different from traditional RBAC is that roles and permissions are not connected directly but are put together by tasks. It is a dynamic authorization model with fine-grained partition on users, roles, tasks and sessions. The unit of task becomes the permission granularity. It is more convenient for enterprise privilege management such as distributed application, C/S access control and workflow management. It can reduce the administrator's burden and avoid some potential safety hazards because of adopted dynamic authorization.Fourth International Conference on Networked Computing and Advanced Information Management 978-0-7695-3322-3/08 $25.00

show abstract

A New Role-Based Authorization Model in a Corporate Workflow Systems*

Cited by 2 publications

References 10 publications

Atom-Role-Based Access Control Model

Atom-Role-Based Access Control Model

A Task-Role Based Access Control Model with Multi-Constraints

Contact Info

Product

Resources

About