Mixing privacy with role-based access control

Authors:
Aiman Lafi Al-Harbi;Sylvia L. Osborn
Affiliations:
The University of Western Ontario, London, ON, Canada;The University of Western Ontario, London, ON, Canada
Venue:
Proceedings of The Fourth International C* Conference on Computer Science and Software Engineering
Year:
2011

Citing 8
Cited 0

Role-Based Access Control Models

Computer
The role graph model and conflict of interest

ACM Transactions on Information and System Security (TISSEC) - Special issue on role-based access control
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
Access Rights Administration in Role-Based Security Systems

Proceedings of the IFIP WG11.3 Working Conference on Database Security VII
Privacy-aware role based access control

Proceedings of the 12th ACM symposium on Access control models and technologies
Purpose based access control for privacy protection in relational database systems

The VLDB Journal — The International Journal on Very Large Data Bases
Purpose Based Access Control for Privacy Protection in Object Relational Database Systems

DSDE '10 Proceedings of the 2010 International Conference on Data Storage and Data Engineering
Static and Dynamic Delegation in the Role Graph Model

IEEE Transactions on Knowledge and Data Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we investigate different alternatives for including privacy purposes into role-based access control. We emphasize that not all permissions have a purpose, only those which deal with the use of data about individuals stored in a system need to have privacy labels. We develop a model for including privacy purposes in the Role Graph Model, and show its implementation in a prototype.