Administration of an RBAC System

  • Authors:
  • Fredj Dridi;Björn Muschall;Günther Pernul

  • Affiliations:
  • -;-;-

  • Venue:
  • HICSS '04 Proceedings of the Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 7 - Volume 7
  • Year:
  • 2004

Quantified Score

Hi-index 0.01

Visualization

Abstract

Recently RBAC (role-based access controls) was found to be among the most attractive solutions for providing acess control in web-based e-commerce and e-government applications. Usually, such systems involve a huge number of heterogeneous users working with the systems under different rights and obligations. In an RBAC authorization and accesscontrol system the users are assigned to roles which are derived from the organizational structure. Because of the huge amount of users and the diversity of their requirments the administration of a RBAC system becomes crucial. Our group is involved in the European funded Webocracy project in which we have designed and implemented an RBAC system based on the Core RBAC model as de.ned in a proposed NIST standard. Based on the functional speci.cation of the proposed NIST standard we speci.ed administration requirements for managing roles, users and permissions we speci.ed. In this paper we will present an administration console, which we designed to implement this requirements.