UC-RBAC: A usage constrained role-based access control model

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2836, Issue , 2003, Pages 337-347

  Xu, Zhen ^a   Feng, Dengguo ^a   Li, Lan ^a   Chen, Hua ^a  

^a GRADUATE SCHOOL   (China)

Author keywords

[No Author keywords available]

Indexed keywords

SEMANTICS;

DYNAMIC ASPECTS; FORMAL DEFINITION; PERIODIC TIME; RBAC MODEL; ROLE-BASED ACCESS CONTROL MODEL; USAGE TIME;

ACCESS CONTROL;

EID: 0142156709     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-39927-8_31     Document Type: Article

References (20)

1. R. Sandhu, D. Ferraiolo, and D. Kuhn, The NIST model for role-based access control: towards a unified standard, In Proceedings of Fifth ACM Workshop on Role-Based Access Control (Phoenix, AZ), p. 47-63, 2000.
2. Gregory Tassey, Michael P. Gallaher, et al., Economic Impact Assessment of NIST's Role-Based Access Control (RBAC) Program, http://www.nist.gov/director/prog-ofc/report02-1.pdf, 2003
3. American National Standard for Information Technology - Role Based Access Control, http://csrc.nist.gov/rbac/rbac-std-ncits.pdf, 2003
4. Elisa Bertino, Piero Andrea Bonatti, Elena Ferrari, TRBAC: A temporal role-based access control model, ACM Transactions on Information and System Security (TISSEC), v.4 n.3, p. 191-233, August 2001
5. E. Barka and R. Sandhu, A role-based delegation model and some extensions. In Proceedings of the 23rd National Information Systems Security Conference (Baltimore, Md.), p. 16-19, Oct. 2000
6. Trent Jaeger, On the increasing importance of constraints, In Proceedings of the fourth ACM workshop on Role-based access control, p. 33-42, October 28-29, 1999
7. D. Ferraiolo and D. Kuhn, Role based access control, In Proceedings of the 15th Annual Conference on National (USA) Computer Security (Gaithersburg, MD), p.554-563, 1992
8. R. Sandhu, Edward J. Coyne , Hal L. Feinstein, Charles E. Youman, Role-Based Access Control Models, Computer, v.29 n.2, p. 38-47, February 1996
9. R. Sandhu, Role hierarchies and constraints for lattice-based access controls. In Proceedings of the Fourth European Symposium on Research in Computer Security (ESORICS96,Rome, Italy, Sept.), E. Bertino, Ed. Springer-Verlag, New York, NY, 1996.
10. L. Giuri and P. Iglio, A formal model for role-based access control with constraints. In Proceedings of 9th IEEE Workshop on Computer Security Foundations (Kenmare, Ireland,June). IEEE Press, Piscataway, NJ, p.136-145, 1996
11. Gail-Joon Ahn, R. Sandhu, Role-based authorization constraints specification, ACM Transactions on Information and System Security (TISSEC), v.3 n.4, p.207-226, Nov. 2000
12. Elisa Bertino, Piero Andrea Bonatti, Elena Ferrari, TRBAC: A temporal role-based access control model, ACM Transactions on Information and System Security (TISSEC), v.4 n.3, p. 191-233, August 2001
13. Elisa Bertino, Claudio Bettini, Elena Ferrari, Pierangela Samarati, An access control model supporting periodicity constraints and temporal reasoning, ACM Transactions on Database Systems (TODS), v.23 n.3, p.231-285, Sept. 1998
14. M. Niezette and J. Stevenne. An efficient symbolic representation of periodic time. In Proc. First International Conference on Information and Knowledge Management, 1992.
15. Abrams, Marshall, et al., Generalized Framework for Access Control: Towards Prototyping the ORGCON Policy, Proceedings of the 14th National Computing Security Conference, p. 257-266, 1991.
16. Park, Jaehong, and R. Sandhu, Towards Usage Control Models: Beyond Traditional Access Control, Proc. of the 7th ACM Symposium on Access Control Models and Technologies, 2002.
17. J. Park, R. Sandhu, Originator Control in Usage Control, 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'02), June 05-07, p. 60-68, 2002
18. Jason Crampton, Specifying and enforcing constraints in role-based access control, Proceedings of the eighth ACM symposium on Access control models and technologies, p. 43-50, 2003.
19. Gustaf Neumann, Mark Strembeck, An approach to engineer and enforce context constraints in an RBAC environment, Proceedings of the eighth ACM symposium on Access control models and technologies, p. 65-79, 2003
20. James B. D. Joshi, Basil Shafiq, Arif Ghafoor, Elisa Bertino, Dependencies and separation of duty constraints in GTRBAC, Proceedings of the eighth ACM symposium on Access control models and technologies, p. 51-64, 2003