Privacy-aware role-based access control

IEEE Security and Privacy

Volumn 7, Issue 4, 2009, Pages 35-43

  Ni, Qun ^a   Bertino, Elisa ^a   Lobo, Jorge ^b   Calo, Seraphin B ^b  

^a PURDUE UNIVERSITY   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Model; Obligation; Policy; Privacy; Role based access control

Indexed keywords

BOOLEAN EXPRESSIONS; COMPLEX CONDITION; OBJECT HIERARCHY; OBLIGATION; POLICY; PRIVACY; PRIVACY LAW; PRIVACY POLICIES; ROLE HIERARCHY; ROLE-BASED ACCESS CONTROL; SEAMLESS INTEGRATION;

SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 70349333899     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2009.102     Document Type: Article

References (7)

1. D.F. Ferraiolo et al., "Proposed NIST Standard for 1. Role-Based Access Control," ACM Trans. Information Systems Security, vol.4, no.3, 2001, pp. 224-274.
2. R.S. Sandhu et al., "Role-Based Access Control 2. Models," Computer, vol.29, no.2, 1996, pp. 38-47.
3. C.S. Powers, "Privacy Promises, Access Control, and 3. Privacy Management," Proc. 3rd Int'l Symp. Electronic Commerce (ISEC), IEEE CS Press, 2002, p. 13.
4. A.H. Anderson, "A Comparison of Two Privacy Pol- 4. icy Languages: EPAL and XACML," Proc. 3rd ACM Workshop Secure Web Services (SWS), ACM Press, 2006, pp. 53-60.
5. Q. Ni et al., "Conditional Privacy-Aware Role-Based 5. Access Control," Proc. 12th European Symp. Research In Computer Security (ESORICS 07), Springer, LNCS 4734, 2007, pp. 72-89.
6. Q. Ni et al., "Privacy-Aware Role-Based Access Con- 6. trol," Proc. ACM Symp. Access Control Models and Technologies (SACMAT), ACM Press, 2007, pp. 41-50.
7. Q. Ni, E. Bertino, and J. Lobo, "An Obligation Model 7. Bridging Access Control Policies and Privacy Policies," Proc. ACM Symp. Access Control Models and Technologies (SACMAT), ACM Press, 2008, pp. 133 -142.