Role-Based delegation with negative authorization

Authors:
Hua Wang;Jinli Cao;David Ross
Affiliations:
Department of Maths & Computing, University of Southern Queensland, Toowoomba, QLD, Australia;Department of Computer Science & Computer Engineering, La Trobe University, Melbourne, VIC, Australia;Engineering Faculty, University of Southern Queensland, Toowoomba, QLD, Australia
Venue:
APWeb'06 Proceedings of the 8th Asia-Pacific Web conference on Frontiers of WWW Research and Development
Year:
2006

Citing 21
Cited 0

Authentication in distributed systems: theory and practice

ACM Transactions on Computer Systems (TOCS)
A calculus for access control in distributed systems

ACM Transactions on Programming Languages and Systems (TOPLAS)
Rationale for the RBAC96 family of access control models

RBAC '95 Proceedings of the first ACM Workshop on Role-based access control
Role activation hierarchies

RBAC '98 Proceedings of the third ACM workshop on Role-based access control
Supporting relationships in access control using role based access control

RBAC '99 Proceedings of the fourth ACM workshop on Role-based access control
A rule-based framework for role based delegation

SACMAT '01 Proceedings of the sixth ACM symposium on Access control models and technologies
A model of OASIS role-based access control and its support for active security

SACMAT '01 Proceedings of the sixth ACM symposium on Access control models and technologies
The role of trust management in distributed systems security

Secure Internet programming
Distributed access-rights management with delegation certificates

Secure Internet programming
A role-based delegation framework for healthcare information systems

SACMAT '02 Proceedings of the seventh ACM symposium on Access control models and technologies
An Extended Authorization Model for Relational Databases

IEEE Transactions on Knowledge and Data Engineering
Formal Authorization Allocation Approaches for Role-Based Access Control Based on Relational Algebra Operations

WISE '02 Proceedings of the 3rd International Conference on Web Information Systems Engineering
Framework for role-based delegation models

ACSAC '00 Proceedings of the 16th Annual Computer Security Applications Conference
Formal authorisation allocation approaches for permission-role assignments using relational algebra operations

ADC '03 Proceedings of the 14th Australasian database conference - Volume 17
A Practically Implementable and Tractable Delegation Logic

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
A Consumer Scalable Anonymity Payment Scheme with Role-Based Access Control

WISE '01 Proceedings of the Second International Conference on Web Information Systems Engineering (WISE'01) Volume 1 - Volume 1
A Global Ticket-Based Access Scheme for Mobile Users

Information Systems Frontiers
Rule-Based RBAC with Negative Authorization

ACSAC '04 Proceedings of the 20th Annual Computer Security Applications Conference
A Flexible Payment Scheme and Its Role-Based Access Control

IEEE Transactions on Knowledge and Data Engineering
Authorization algorithms for the mobility of user-role relationship

ACSC '05 Proceedings of the Twenty-eighth Australasian conference on Computer Science - Volume 38
Achieving secure and flexible M-services through tickets

IEEE Transactions on Systems, Man, and Cybernetics, Part A: Systems and Humans

Quantified Score

Hi-index	0.00

Visualization

Abstract

Role-based delegation model (RBDM) based on role-based access control (RBAC) has proven to be a flexible and useful access control model for information sharing on distributed collaborative environment. Authorization is an important functionality for RBDM in distributed environment where a conflicting problem may arise when one user grants permission of a role to a delegated user and another user grants the negative permission to the delegated user. This paper aims to analyse role-based group delegation features that has not studied before, and to provide an approach for the conflicting problem by adopting negative authorization. We present granting and revocation delegating models first, and then discuss user delegation authorization and the impact of negative authorization on role hierarchies.