Designing an Agent-Based RBAC System for Dynamic Security Policy

Authors:
Wataru Yamazaki;Hironori Hiraishi;Fumio Mizoguchi
Affiliations:
Tokyo University of Science;Tokyo University of Science;Tokyo University of Science
Venue:
WETICE '04 Proceedings of the 13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises
Year:
2004

Citing 0
Cited 3

RBAC-MAS and SODA: Experimenting RBAC in AOSE

Engineering Societies in the Agents World IX
A state-transfer-based dynamic policy approach for constraints in RBAC

WAIM'05 Proceedings of the 6th international conference on Advances in Web-Age Information Management
Semantic access control for corporate mobile devices

ICA3PP'10 Proceedings of the 10th international conference on Algorithms and Architectures for Parallel Processing - Volume Part II

Quantified Score

Hi-index	0.00

Visualization

Abstract

Most practical applications have dynamic attributes, but conventional access control mechanisms have not addressed the problem sufficiently. In this paper, we discuss how to realize an access control system that enables us to manage dynamic security policies. Our proposed method is based on Role-Based Access Control (RBAC), and the agent decides access rights dynamically for the abstract role, which is defined by the role administrator statically using context-enabled rules and an inference engine. By defining rules using declarative representation (logic programming style), bidirectional queries can be realized for USER-ROLE-PERMISSION relationships. In this paper, we will demonstrate the usefulness of our proposed system by presenting our project management application and its access control system.