The conflict detection between permission assignment constraints in role-based access control

Authors:
Chang-Joo Moon;Woojin Paik;Young-Gab Kim;Ju-Hum Kwon
Affiliations:
Department of Computer Science, Konkuk University, Chungcheongbuk-do, Korea;Department of Computer Science, Konkuk University, Chungcheongbuk-do, Korea;Department of Computer Science and Engineering, Korea University, Seoul, Korea;Korea Air Force Central Computer Center, Chungcheongnam-do, Korea
Venue:
CISC'05 Proceedings of the First SKLOIS conference on Information Security and Cryptology
Year:
2005

Citing 7
Cited 0

Role-Based Access Control Models

Computer
Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems

RBAC '97 Proceedings of the second ACM workshop on Role-based access control
The role graph model and conflict of interest

ACM Transactions on Information and System Security (TISSEC) - Special issue on role-based access control
The specification and enforcement of authorization constraints in workflow management systems

ACM Transactions on Information and System Security (TISSEC) - Special issue on role-based access control
The NIST model for role-based access control: towards a unified standard

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control
Role-based authorization constraints specification

ACM Transactions on Information and System Security (TISSEC)
Role-Based Access Control

Role-Based Access Control

Quantified Score

Hi-index	0.00

Visualization

Abstract

Assuring integrity of permission assignment (PA) constraints is a difficult task in role-based access control (RBAC) because of the large number of constraints, users, roles and permissions in a large enterprise environment. We provide solutions to this problem using the conflict concept. This paper introduces the conflict model in order to understand the conflicts easily and to detect conflicts effectively. The conflict model is classified as a permission-permission model and a role-permission model. This paper defines two type conflicts using the conflict model. The first type is an inter-PA-constraints (IPAC) conflict that takes place between PA constraints. The other type is a PA–PAC conflict that takes place between a PA and a PA constraint (PAC). Also, the conditions of conflict occurrence are formally specified and proved. We can assure integrity on permission assignment by checking conflicts before PA and PA constraints are applied.