Name
Abstract | ||
|---|---|---|
Rôle-based access control (RBAC) is increasingly attracting attention because it reduces the complexity and cost of security administration by interposing the notion of rôle in the assignment of permissions to users. In this paper, we present a formal framework relying on an extension of the π-calculus to study the behaviour of concurrent systems in a RBAC scenario. We define a type system ensuring that the specified policy is respected during computations, and a behavioural equivalence to equate systems. We then consider a more sophisticated feature that can be easily integrated in our framework, i.e., the possibility of automatically adding rôle activations and deactivations to processes to be run under a given policy (whenever possible). Finally, we show how the framework can be easily extended to express significant extensions of the core RBAC model, such as rôles hierarchies or constraints determining the acceptability of the system components. |
Year | DOI | Venue |
|---|---|---|
2006 | 10.3233/JCS-2006-14202 | Journal of Computer Security |
Keywords | Field | DocType |
behavioural equivalence,concurrent system,security administration,role-based access control,core rbac model,system component,process calculi,rbac,type systems,specified policy,le-based access control,behavioural equivalences,rbac scenario,formal framework,type system,access control,role based access control | Computer science,Role-based access control,Theoretical computer science,Equivalence (measure theory),Access control,Hierarchy,Process calculus,Computation,Distributed computing | Journal |
Volume | Issue | ISSN |
14 | 2 | 0926-227X |
Citations | PageRank | References |
7 | 0.46 | 18 |
Authors | ||
3 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Chiara Braghin | 1 | 105 | 8.86 |
| Daniele Gorla | 2 | 270 | 22.67 |
| Vladimiro Sassone | 3 | 1498 | 104.86 |