Design and implementation of document access control model based on role and security policy

Authors:
Liangjian Mao;Shuzhen Yao;Kai Zhang;Kouichi Sakurai
Affiliations:
Department of Informatics, Kyushu University, Fukuoka, Japan;School of Software, BeiHang University, Beijing, China;School of Software, BeiHang University, Beijing, China;Department of Informatics, Kyushu University, Fukuoka, Japan
Venue:
INTRUST'10 Proceedings of the Second international conference on Trusted Systems
Year:
2010

Citing 7
Cited 0

The ARBAC97 model for role-based administration of roles: preliminary description and outline

RBAC '97 Proceedings of the second ACM workshop on Role-based access control
Formal specification for role based access control user/role and role/role relationship management

RBAC '98 Proceedings of the third ACM workshop on Role-based access control
TRBAC: A temporal role-based access control model

ACM Transactions on Information and System Security (TISSEC)
Information Flow Control in Role-Based Model for Distributed Objects

ICPADS '01 Proceedings of the Eighth International Conference on Parallel and Distributed Systems
Display-only file server: a solution against information theft due to insider attack

Proceedings of the 4th ACM workshop on Digital rights management
Security Policies to Mitigate Insider Threat in the Document Control Domain

ACSAC '04 Proceedings of the 20th Annual Computer Security Applications Conference
Dynamic security rules for geo data

DPM'09/SETOP'09 Proceedings of the 4th international workshop, and Second international conference on Data Privacy Management and Autonomous Spontaneous Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

To design a method of document access control with flexibility, generality and fine-granularity, we establish a document access control model, which is an abstract description for general scene of document access. Security policies are presented to describe security constraints, so as to meet security requirements of this model. In order to demonstrate the theories and strategies more intuitively, we design a prototype system of document access control based on XACML-RBAC framework to verify the validity of model and algorithms and the feasibility of mechanism. It realizes the authorization protection of the standard OFFICE documents.