A Logical Approach to Dynamic Role-Based Access Control

Authors:
Philippe Balbiani;Yannick Chevalier;Marwa Houri
Affiliations:
Institut de recherche en informatique de Toulouse, Toulouse University, France;Institut de recherche en informatique de Toulouse, Toulouse University, France;Institut de recherche en informatique de Toulouse, Toulouse University, France
Venue:
AIMSA '08 Proceedings of the 13th international conference on Artificial Intelligence: Methodology, Systems, and Applications
Year:
2008

Citing 8
Cited 1

An overview of transaction logic

Theoretical Computer Science - Special issue on formal methods in databases and software engineering
Protection in operating systems

Communications of the ACM
Computers and Intractability: A Guide to the Theory of NP-Completeness

Computers and Intractability: A Guide to the Theory of NP-Completeness
PBDM: a flexible delegation model in RBAC

Proceedings of the eighth ACM symposium on Access control models and technologies
Logic in Access Control

LICS '03 Proceedings of the 18th Annual IEEE Symposium on Logic in Computer Science
Design of a Role-Based Trust-Management Framework

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Cassandra: Distributed Access Control Policies with Tunable Expressiveness

POLICY '04 Proceedings of the Fifth IEEE International Workshop on Policies for Distributed Systems and Networks
Cassandra: Flexible Trust Management, Applied to Electronic Health Records

CSFW '04 Proceedings of the 17th IEEE workshop on Computer Security Foundations

A declarative two-level framework to specify and verify workflow and authorization policies in service-oriented architectures

Service Oriented Computing and Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Since its formalization RBAC has become the yardstick for the evaluation of access control formalisms. In order to meet organizational needs, it has been extended along several directions: delegation, separation of duty, history-based access control, etc. We propose in this paper an access control language in which RBAC and all the above-listed extensions can be encoded. In contrast with Cassandra, we have not promoted role management mechanism to first-class citizenship, and have based our model on the assumption that access control systems could be separated into a dynamic part that evolves according to actions performed by users and a static part. We solve in this paper decision problems related to access control for policies expressed in this language.