A feature-based approach for modeling role-based access control systems

  • Authors:

  • Sangsig Kim;Dae-Kyoo Kim;Lunjin Lu;Suntae Kim;Sooyong Park

  • Affiliations:

  • Department of Computer Science and Engineering, Oakland University, Rochester, MI 48309, USA;Department of Computer Science and Engineering, Oakland University, Rochester, MI 48309, USA;Department of Computer Science and Engineering, Oakland University, Rochester, MI 48309, USA;Department of Computer Engineering, Kangwon National University, Gangwon, South Korea;Department of Computer Science and Engineering, Sogang University, Seoul, South Korea

  • Venue:
  • Journal of Systems and Software
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Abstract: Role-based access control (RBAC) is a popular access control model for enterprise systems due to its flexibility and scalability. There are many RBAC features available, each providing a different function. Not all features are needed for an RBAC system. Depending on the requirements, one should be able to configure features on a need basis, which reduces development complexity and thus fosters development. However, there have not been suitable methods that enable systematic configuration of RBAC features for system development. This paper presents an approach for configuring RBAC features using a combination of feature modeling and UML modeling. Feature modeling is used for capturing the structure of features and configuration rules, and UML modeling is used for defining the semantics of features. RBAC features are defined based on design principles of partial inheritance and compatibility, which facilitates feature composition and verification. We demonstrate the approach using a banking application and present tool support developed for the approach.