Authrule: a generic rule-based authorization module

Authors:
Sönke Busch;Björn Muschall;Günther Pernul;Torsten Priebe
Affiliations:
Booz Allen Hamilton GmbH, Düsseldorf, Germany;Department of Information Systems, University of Regensburg, Regensburg, Germany;Department of Information Systems, University of Regensburg, Regensburg, Germany;Capgemini Consulting Österreich AG, Vienna, Austria
Venue:
DBSEC'06 Proceedings of the 20th IFIP WG 11.3 working conference on Data and Applications Security
Year:
2006

Citing 7
Cited 2

Configuring role-based access control to enforce mandatory and discretionary access control policies

ACM Transactions on Information and System Security (TISSEC)
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
A logical framework for reasoning about access control models

ACM Transactions on Information and System Security (TISSEC)
A Content-Based Authorization Model for Digital Libraries

IEEE Transactions on Knowledge and Data Engineering
An authorization system for digital libraries

The VLDB Journal — The International Journal on Very Large Data Bases
KAoS Policy and Domain Services: Toward a Description-Logic Approach to Policy Representation, Deconfliction, and Enforcement

POLICY '03 Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks
The UCONABC usage control model

ACM Transactions on Information and System Security (TISSEC)

Specification and enforcement of flexible security policy for active cooperation

Information Sciences: an International Journal
Attribute-Based authentication and authorisation infrastructures for e-commerce providers

EC-Web'06 Proceedings of the 7th international conference on E-Commerce and Web Technologies

Quantified Score

Hi-index	0.00

Visualization

Abstract

As part of the access control process an authorization decision needs to be taken based on a certain authorization model. Depending on the environment different models are applicable (e.g., RBAC in organizations, MAC in the military field). An authorization model contains all necessary elements needed for the decision (e.g., subjects, objects, and roles) as well as their relations. As these elements are usually inherent in the software architecture of an access control module, such modules limit themselves to the use of a certain specific authorization model. A later change of the model consequently results in a substantial effort for revising the software architecture of the given module. Rule-based systems are well suited to represent authorization models by mapping them to facts and rules, which can be modified in a flexible manner. In this paper we present a generic authorization module, which can take authorization decisions on the basis of arbitrary models utilizing rule-based technology. The implementation of the popular RBAC and ABAC (attribute-based access control) models is demonstrated.