A role administration system in role-based authorization infrastructures - Design and implementation

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2003, Pages 325-330

  Shin, Dongwan ^a   Ahn, Gail Joon ^a   Cho, Sangrae ^b   Jin, Seunghun ^b  

^a University of North Carolina at Charlotte   (United States)

^b Electronics and Telecommunications Research Institute (ETRI)   (South Korea)

Author keywords

Access control; Authorization Infrastructure; Role Administration; Role Engineering; Role based

Indexed keywords

COMPUTER AIDED DESIGN; CONSTRAINT THEORY; DATABASE SYSTEMS;

ROLE ADMINISTRATION;

SECURITY OF DATA;

EID: 0037661199     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (16)

1. G.-J. Ahn and R. Sandhu. Role-based authorization constraints specification. ACM Transactions on Information and System Security, 3(4), November 2000.
2. E. Coyne. Role engineering. In Proceedings of 1st ACM Workshop on Role-Based Access Control, Gaithersburg, MD, November 1995.
3. P. Epstein and R. Sandhu. Engineering of role/permission assignment. In Proceedings of 17th Annual Computer Security Application Conference, New Orleans, LA, December 2001.
4. S. Farrell and R. Housley. An internet attribute certificate profile for authorization. Technical report, PKIX Working Group, June 2001.
5. D. F. Ferraiolo, J. F. Barkley, and D. R. Kuhn. A role based access control model and reference implementation within a corporate intranet. ACM Transactions on Information and System Security, 2(1), February 1999.
6. C. Goh and A. Baldwin. Towards a more complete model for role. In Proceedings of 3rd ACM Workshop on Role-Based Access Control, Fairfax, VA, October 22-23 1998.
7. ITU. ITU-T Recommendation X.509. Information Technology: Open Systems Interconnection - The Directory: Public-Key And Attribute Certificate Frameworks, 2000. ISO/IEC 9594-8.
8. A. Kern, M. Kuhlmann, A. Schaad, and J. Moffett. Observations on the role life-cycle in the context of enterprise security management. In Proceedings of 7th ACM Symposium on Access Control Models and Technologies, Monterey, CA, June 2002.
9. G. Neumann and M. Strembeck. Design and implementation of a flexible RBAC-service in an object-oriented scripting language. In Proceedings of 8th ACM Conference on Computer and Communication Security, Philadelphia, PA, November 2001.
10. G. Neumann and M. Strembeck, A scenario-driven role engineering process for functional RBAC roles. In Proceedings of 7th ACM Symposium on Access Control Models and Technologies, Monterey, CA, June 2002.
11. H. Roeckle, G. Schimpf, and R. Weidinger. Process-oriented approach for role-finding to implement role-based security administration in a large industrial organization. In Proceedings of 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, July 26-27 2000.
12. R. Sandhu, V. Bhamidipati, and Q. Munawer. The ARBAC97 model for role-based administration of roles. ACM Transactions on Information and System Security, 2(1), February 1999.
13. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
14. R. S. Sandhu, D. Ferraiolo, and D. Kuhn. The NIST model for role-based access control: Towards a unified standard. In Proceedings of 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, July 26-27 2000.
15. D. Shin, G.-J. Ahn, and S. Cho. Role-based EAM using x.509 attribute certificate. In Proceedings of Sixteenth Annual IFIP WG 11.3 Working Conference on Data and Application Security, Cambridge, UK, July 29-31 2002.
16. L. Zhang, G.-J. Ahn, and B. Chu. A rule-based framework for role-based delegation. In Proceedings of 6th ACM Symposium on Access Control Models and Technologies, pages 153-162, Chantilly, VA, May 3-4 2001.