A verifiable modeling approach to configurable role-based access control

  • Authors:

  • Dae-Kyoo Kim;Lunjin Lu;Sangsig Kim

  • Affiliations:

  • Department of Computer Science and Engineering, Oakland University, Rochester, MI;Department of Computer Science and Engineering, Oakland University, Rochester, MI;Department of Computer Science and Engineering, Oakland University, Rochester, MI

  • Venue:
  • FASE'10 Proceedings of the 13th international conference on Fundamental Approaches to Software Engineering
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Role-based access control (RBAC) is a popular access control model for enterprise systems due to its economic benefit and scalability. There are many RBAC features available, each providing a different feature. Not all features are needed for an RBAC system. Depending on the requirements, one should be able to configure RBAC by selecting only those features that are needed for the requirements. However, there have not been suitable methods that enable RBAC configuration at the feature level. This paper proposes an approach for systematic RBAC configuration using a combination of feature modeling and UML modeling. The approach describes feature modeling and design principles for specifying and verifying RBAC features and a composition method for building configured RBAC. We demonstrate the approach by building an RBAC configuration for a bank application.