Fine-grained controllable delegation authorization model based on trustworthiness

Ruan Jian Xue Bao/Journal of Software

Volumn 18, Issue 8, 2007, Pages 2002-2015

  Zhai, Zheng De ^a   Feng, Deng Guo ^a   Xu, Zhen ^a  

^a INSTITUTE OF SOFTWARE   (China)

Author keywords

Authorization model; Delegation; Propagation of permission; Trust management; Trustworthiness

Indexed keywords

ALGORITHMS; INTERNET; NETWORK SECURITY; SECURITY OF DATA;

ACCESS CONTROL POLICY; FCDAM; FINE GRAINED CONTROLLABLE DELEGATION AUTHORIZATION MODEL; PERMISSION PROPAGATION; ROLE BASED ACCESS CONTROL (RBAC); SENSITIVITY LEVEL; TRUST MANAGEMENT; TRUSTWORTHINESS;

ACCESS CONTROL;

EID: 34548652319     PISSN: 10009825     EISSN: None     Source Type: Journal    
DOI: 10.1360/jos182002     Document Type: Article

References (17)

1. Sandhu RS, Coyne EJ, Feinstein HL, Youman CE. Role-Based access control models. IEEE Computer, 1996, 29(2): 38-47.
2. ANSI INCITS 359-2004. Role based access control. American National Standard for Information Technology, 2004.
3. Ferraiolo DF, Cugini J, Kuhn DR. Role-Based access control (RBAC): Features and motivations. In: Proc. of the 11th Annual Computer Security Application Conf. New Orleans: IEEE Computer Society Press, 1995. 241-248.
4. Joshi JBD, Bertino E, Latif U, Ghafoor A. A generalized temporal role based access control model. IEEE Trans. on Knowledge and Data Engineering, 2005, 17(1): 4-23.
5. Li NH, Winsborough WH, Mitchell JC. Distributed credential chain discovery in trust management (full version). In: Proc. of the 8th ACM Conf. on Computer and Communications Security. New York: ACM Press, 2001. 156-165. http://crypto.stanford.edu/-ninghui/papers/disc.pdf.
6. Li NH, Mitchell JC, Winsborough WH. Design of a role-based trust management framework. In: Heather H, ed. Proc. of the IEEE Symp. on Security and Privacy. Washington: IEEE Computer Society Press, 2002. 114-130.
7. Wainer J, Kumar A. A fine-grained, controllable user-to-user delegation method in RBAC. In: Proc. of the 10th ACM Symp. on Access Control Models and Technologies. New York: ACM Press, 2005. 59-66.
8. Bandmann O, Dam M, Firozabadi BS. Constrained delegation. In: Proc. of the 23rd Annual IEEE Symp. on Security and Privacy. Oakland: IEEE Computer Society Press, 2002. 131-143.
9. Zhang LH, Ahn GJ, Chu BT. A rule-based framework for role-based delegation. In: Sandhu RS, Jaeger T, eds. Proc. of the 6th ACM Symp. on Access Control Models and Technologies. New York: ACM Press, 2001. 153-162.
10. Blaze M, Feigenbaum J, Lacy I. Decentralized trust management. In: Proc. of the '96 IEEE Symp. on Security and Privacy. Washington: IEEE Computer Society Press, 1996. 164-173. http://citeseer.ist.psu.edu/blaze96decentralized.html.
11. Blaze M, Feigenbaum J, Ioannidis J, Keromytis A. The KeyNote trust-management system version 2. IETF RFC 2704, 1999.
12. Becker MY, Sewell P. Cassandra: Distributed access control policies with tunable expressiveness. In: Proc. of the 5th IEEE Int'l Workshop on Policies for Distributed Systems and Networks (POLICY 2004). Los Alamitos: IEEE Computer Society Press, 2004. 159-168.
13. Li NH, Grosof BN, Feigenbaum J. Delegation logic: A logic-based approach to distributed authorization. ACM Trans. on Information and System Security (TISSEC), 2003, 6(1): 128-171.
14. Hong F, Zhu X, Wang SB. Delegation depth control in trust-management system. In: Proc. of the 19th Int'l Conf. on Advanced Information Networking and Applications (AINA 2005). Washington: IEEE Computer Society, 2005. 411-414.
15. Liao JG, Hong F, Zhu GM, Yang QW. Trustworthiness-Based authorization delegation model. Chinese Journal of Computers, 2006, 29(8): 1265-1270 (in Chinese with English abstract).
16. Chakraborty S, Ray I. TrustBAC-Integrating trust relationships into the RBAC model for access control in open systems. In: Proc. of the 11th ACM Symp. on Access Control Models And Technologies. New York: ACM Press, 2006. 49-58.
17. Organization for Advancement of Structured Information Standard (OASIS). Core and hierarchical role based access control (RBAC) profile of XACML v2.0. 2005.