Service-enabled access control for distributed data

IEE Proceedings: Software

Volumn 153, Issue 1, 2006, Pages 24-30

  Turner, M ^a   Brereton, P ^a   Budgen, D ^a  

^a KEELE UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SOFTWARE; DATA TRANSFER; INFORMATION ANALYSIS; PROJECT MANAGEMENT; PUBLIC POLICY;

CONTEXTUAL INFORMATION; DISTRIBUTED DATA INTEGRATION SYSTEM; SERVICE-ENABLED ACCESS CONTROL;

COMPUTER ARCHITECTURE;

EID: 33644514037     PISSN: 14625970     EISSN: None     Source Type: Journal    
DOI: 10.1049/ip-sen:20045039     Document Type: Conference Paper

References (20)

1. Turner, M., Zhu, F., Kotsiopoulos, I., Russell, M., Budgen, D., Bennett, K., Brereton, P., Keane, J., Layzell, P., and Rigby, M.: ' Using web service technologies to create an information broker' ', Proc. 26th Int. Conf. on Software Engineering (ICSE 2004), 2004, IEEE Computer Society Press, p. 552-561
2. Bennett, K.H., Layzell, P.J., Budgen, D., Brereton, P., Macaulay, L., and Munro, M.: ' Service-based software: the future for flexible software' ', Proc. 7th Asia-Pacific Software Engineering Conf., 2000, IEEE Computer Society Press, p. 214-221
3. Brereton, O.P., Budgen, D., Bennett, K., Munro, M., Layzell, P., Macaulay, L., Griffiths, D., and Stannett, C.: ' The future of software ', Commun. ACM, 1999, 42, (12), p. 78-84
4. Samarati, P., and De Capitani di Vimercati, S.: ' Access control: policies, models, and mechanisms ', Focardi, R., Gorrieri, R., Foundations of security analysis and design, 2001), 2172, p. 137-196 Lecture Notes in Computer Science 2172
5. Ferraiolo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.R., and Chandramouli, R.: ' Proposed NIST standard for role-based access control ', ACM Trans. Inf. Syst. Secur., 2001, 4, (3), p. 224-274
6. Sandhu, R.S., Coyne, E., Feinstein, H., and Youman, C.: ' Role-based access control models ', Computer, 1996, 29, (2), p. 38-47
7. Bacon, J., and Moody, K.: ' Toward open, secure, widely distributed services ', Commun. ACM, 2002, 45, (6), p. 59-64
8. Longstaff, J.J., Lockyer, M.A., and Nicholas, J.: ' The Tees confidentiality model: an authorisation model for identities and roles ', Proc. 8th ACM Symposium on Access Control Models and Technologies (SACMAT 2003), 2003, ACM Press, p. 125-133
9. 'Distributed communication methods and RBAC for use in health care applications', NIST Internal Report, 5820 (NISTIR 5820), 1996 http://hissa.nist.gov/rbac/poole/ir5820/nistir5820.htm
10. Thomas, R.K.: ' Team-based access control (TMAC): a primitive for applying role-based access controls in collaborative environments ', Proc. 2nd ACM Workshop on Role-Based Access Control, 1997, ACM Press, p. 13-19
11. Farkas, C., and Jajodia, S.: ' The inference problem: a survey ', ACM SIGKDD Explorations Newsletter, 2002, 4, (2), p. 6-12
12. Farkas, C., and Stoica, A.: ' Correlated data inference in ontology guided XML security engine ', Proc. IFIP 17th WG 11.3 Working Conference on Data and Application Security, 2003, Kluwer
13. Georgiadis, C., Mavridis, I., Pangalos, G., and Thomas, R.: ' Flexible team-based access control using contexts ', Proc. 6th ACM Symposium on Access Control Models and Technologies (SACMAT 2001), 2001, ACM Press, p. 21-27
14. Bacon, J., Moody, K., and Yao, W.: ' A model of OASIS role-based access control and its support for active security ', ACM Trans. Inf. Syst. Secur., 2002, 5, (4), p. 492-540
15. Saltzer, J., and Schroeder, M.: ' The protection of information in computer systems ', Proc. IEEE, 1975, 63, (9), p. 1278-1308
16. Zhu, F., Turner, M., Kotsiopoulos, I., Bennett, K., Russell, M., Budgen, D., Brereton, P., Keane, J., Layzell, P., Rigby, M., and Xu, J.: ' Dynamic data integration using web services ', Proc. IEEE Int. Conf. on Web Services (IC-WS 2004), 2004, IEEE Computer Society Press, p. 262-269
17. Kudo, M., and Hada, S.: ' Access control model with provisional actions ', IEICE Trans. Fundam., 2001, E84-A, (1), p. 295-302
18. 'XML Path Language (XPath) 2.0', Technical report, W3C Working Draft 12, W3C, http://www.w3.org/TR/xpath20/
19. UK NHS Patient Confidentiality Model, http://www.nhsia.nhs.uk/ confidentiality/pages/consultation/
20. XACML profile for role-based access control (RBAC), http://docs.oasis- open.org/xacml/cd-xacml-rbac-profile-01.pdf