Combination of duty and historical constraints in role-based access control

  • Authors:
  • Ali Hosseini;Mohammad Abdollahi Azgomi

  • Affiliations:
  • ICT Group, E-Learning Center, Iran University of Science and Technology;School of Computer Engineering, Iran University of Science and Technology

  • Venue:
  • IIT'09 Proceedings of the 6th international conference on Innovations in information technology
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Constraints are an important topic in any access control mechanism. Always, there are demands for defining new constraints or generalizing the existing ones in order to better managing and controlling organizations and specifying new policies. Among access control models, role-based access control (RBAC) is very useful and is continuously under development. In this paper, we propose a new constraint in the RBAC model based on dependent roles that we call combination of duty (CD). Furthermore, static and dynamic types of this constraint are also defined. In addition, these constraints and the two existing constraints in RBAC model (i.e. static and dynamic separation of duty (SD)) are generalized in the base of history as static historical SD, dynamic historical SD, static historical CD and dynamic historical CD.