Role-based access control with X.509 attribute certificates

IEEE Internet Computing

Volumn 7, Issue 2, 2003, Pages 62-69

  Chadwick, David W ^a   Otenko, Alexander ^a   Ball, Edward ^a  

^a UNIVERSITY OF SALFORD   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

GATEWAYS (COMPUTER NETWORKS); NETWORK PROTOCOLS; SECURITY OF DATA; USER INTERFACES;

ROLE-BASED ACCESS CONTROL (RBAC);

PUBLIC KEY CRYPTOGRAPHY;

EID: 0037362986     PISSN: 10897801     EISSN: None     Source Type: Journal    
DOI: 10.1109/MIC.2003.1189190     Document Type: Article

References (15)

1. ITU-T Recommendation X.509, The Directory: Authentication Framework, Int'l Telecomm. Union, Geneva, 2000; ISO/IEC 9594-8.
2. M. Blaze et al., "The Keynote Trust-Management System Version 2," Internet Eng. Task Force RFC 2704, Sept. 1999; www.ietf.org/rfc/rfc2704.txt.
3. R.S. Sandhu et al., "Role-Based Access Control Models," Computer, Vol. 29. no. 2, Feb. 1996, pp. 38-47.
4. S. Knight and C. Grandy, "Scalability Issues in PMI Delegation," Pre-Proc. 1st Ann. PKI Workshop, 2002, pp, 67-77; also available at www.cs.dartmouth.edu/̃pki02/ Knight/pper.pdf.
5. S. Farrell and R. Housley, "An Internet Attribute Certificate for Authorization," Internet draft, Aug. 2000; work in progress.
6. J.S. Park, R. Sandhu, and G. Ahn, "Role-Based Access Control on the Web," ACM Trans. Information and Systems Security, vol. 4, no, 1. ACM Press, Feb 2001, pp 37-71.
7. N. Damianou et al., "The Ponder Policy Specification Language," Proc. Policy 2001, Workshop on Policies for Distributed Systems and Networks, LNCS 1995, Springer-Verlag, 2001, pp. 18-39.
8. E. Bertino, S. Castano, and E. Farrari, "On Specifying Security Policies for Well Documents with an XML-liased Language," Proc. 6th ACM Symp. Access Control Models and Technologies, ACM Press, 2001, pp, 41-52.
9. M.R. Thompson et al., "Authorization Policy in a PKI Environment," Proc. 1st Ann. PKI Workshop, Apr. 2002, pp. 137-149: also available at www.cs.dartmouth.edu/̃pki02/ Thompson/paper.pdf.
10. Extensible Access Control Markup Language (XACML), version 1.0, Organization for the Advancement of Structured Information Standards, Dec. 2002; www.uasis.open.org/ committees/xacml/.
11. D.W. Chadwick and A, Otenko, "RBAC Policies In XML for X.509-based Privilege Management," Proc. IFIP 17th Int'l Conf. Information Security (SEC 2002), Kluwer Academic, 2002, pp. 39-53.
12. ITU-T Recommendation X.812, Security Frameworks for Open Systems: Access Control Framework, Int'l Telecomm. Union, Geneva, 1995; ISO/IEC 10181-3, 1996.
13. Authorization (AZN) API, the Open Group, Jan, 2000; www.opengroup.org/publications/catalog/c908.htm.
14. T. Ryutuv, C. Neuman, and L. Pearlman. "Generic Authorization and Access Control Application Program Interface C-Bindings." Internet draft, Nov. 2000, work in progress: see also www.isi.edu/gost/info/gaaapi/.
15. T. Ryutov and C. Neuman, "Generic Authorization and Access Control Application Program Interface: C-Bindings," Internet draft, Nov. 2000; work in progress.