X-RDR: A role-based delegation processor for Web-based information systems

Operating Systems Review (ACM)

Volumn 39, Issue 1, 2005, Pages 4-21

  Chou, Shihyu ^a   Lu, Eric Jui Lin ^b   Chen, Yi Hui ^b  

^a NATIONAL CHUNG HSING UNIVERSITY   (Taiwan)

^b CHAOYANG UNIVERSITY OF TECHNOLOGY   (Taiwan)

Author keywords

Delegation; Granular access control; WIS; XML

Indexed keywords

ACCESS CONTROL; DELEGATIONS; GRANULAR ACCESS CONTROL; WEB BASED INFORMATION SYSTEMS (WIS);

DISTRIBUTED COMPUTER SYSTEMS; ENCODING (SYMBOLS); MATHEMATICAL MODELS; ONLINE SYSTEMS; SOCIETIES AND INSTITUTIONS; WORLD WIDE WEB; XML;

PROGRAM PROCESSORS;

EID: 33750859363     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1044552.1044553     Document Type: Article

References (23)

1. Scott W. Ambler. Mapping Objects to Relational Databases. Ronin International, 2000. available at http://www.AmbySoft.com/mappingObjects.pdf.
2. Ezedin Barka and Ravi Sandhu. Framework for role-based delegation models. In Proceeding of 16th Annual Computer Security Application Conference (ACSAC 2000), pages 168-176, December 2000.
3. Ezedin Barka and Ravi Sandhu. A role-based delegation model and some extensions. In Proceeding of 23rd National Information Systems Security Conference, December 2000.
4. Elisa Bertino, Barbara Carminati, and Elena Ferrari. XML security. Technical Report 2, Information Security Technical Report, 2001.
5. Elisa Bertino and Silvana Castano. Specifying and enforcing access control policies for XML document sources. World Wide Web Journal, 3(3):1-25, 2000.
6. Elisa Bertino, Silvana Castano, and Elena Ferrar. Securing XML documents with Author-X. IEEE Internet Computing, 5(3):21-31, 2001.
7. David W. Chadwick and Alexander Otenko. The PERMIS X.509 role based privilege management infrastructure. In Proceedings of the 7th ACM Symposium On Access Control Models And Technologies, pages 135-140, June 2002.
8. David W. Chadwick and Alexander Otenko. The PERMIS X.509 role based privilege management infrastructure. Future Generation Computer Systems, 936:1-13, December 2002.
9. Ernesto Damiani, Sabrina De Capitani di Vimercati, Stefano Paraboschi, and Pierangela Samarati. Design and implementation of an access control processor for XML documents. Journal of Computer and Telecommunications Networking, 33(1-6):59-75, June 2000.
10. Ernesto Damiani, Sabrina De Capitani di Vimercati, Stefano Paraboschi, and Pierangela Samarati. Controlling access to XML documents. IEEE Internet Computing, 5(6):18-28, 2001.
11. Ernesto Damiani, Sabrina De Capitani di Vimercati, Stefano Paraboschi, and Pierangela Samarati. A fine-grained access control system for XML documents. ACM Transactions on Information and System Security, 5(2):169-202, May 2002.
12. Javier Lopez, Antonio Mana, Juan J. Ortega, Jose M. Troya, and Mariemma I. Yague. Integrating PMI services in CORE A applications. Computer Standards and Interfaces, 25(4):391-409, August 2003.
13. Javier Lopez, Antonio Mana, and Mariemma I. Yague. XML-based distributed access control system. In third International Conference on E-Commerce and Web Technologies (ECWeb'02), pages 203-213, September 2002.
14. Eric Jui-Lin Lu and Rai-Pu Chen. Design and implementation of a fine-grained Menu control processor for Web-based information systems. Future Generation Computer Systems, 19(7):1105-1119, September 2003.
15. Eric Jui-Lin Lu and Yi-Hui Chen. A flexible delegation processor for web-based information systems. Technical Report CYUT-IM-TR-2003-012, Department of Information Management, Chaoyang University of Technology, December 2003.
16. Hermann Maurer. Modern WISs. Communications of the ACM, 41(7):114-115, July 1998.
17. Guillermo Navarro, Babak Sadighi Firozabadi, Erik Rissanen, and Joan Borrell. Constrained delegation in XML-based access control and digital rights management standards. In CNIS03, Special Session on Architectures and Languages for Digital Rights Management and Access Control, December 2003.
18. Ravi Sandhu, Edward Coyne, Hal Feinstein, and Charles Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
19. Kenji Takahashi and Eugene Liang. Analysis and design of Web-based information systems. In Proceedings of the 6th International World Wide Web Conference, pages 419-426, April 1997.
20. Mariemma I. Yague, Antonio Mana, Javier Lopez, and Jose M. Troya. Applying the semantic web layers to access control. In Proceeding of 14th International Workshop on Database and Expert Systems Application, pages 622-626, September 2003.
21. Longhua Zhang, Gail-Joon Ahn, and Bei-Tseng Chu. A rule-based framework for role based delegation. In Proceedings of the sixth ACM symposium on Access control models and technologies (SACMAT 2001), May 2001.
22. Longhua Zhang, Gail-Joon Ahn, and Bei-Tseng Chu. A rule-based framework for role-based delegation and revocation. ACM Transactions on Information and System Security, 6(3):404-441, August 2003.
23. Xinwen Zhang, Sejong Oh, and Ravi Sandhu. PBDM: a flexible delegation model in RBAC. In Proceedings of the eighth ACM symposium on Access control models and technologies, pages 149-157, June 2003.