A lightweight decentralized authorization model for inter-domain collaborations

SWS'07 - Proceedings of the 2007 ACM Workshop on Secure Web Services

Volumn , Issue , 2007, Pages 83-89

  Lee, Hannah K ^a   Luedemann, Heiko ^a  

^a UNIVERSITY OF HAMBURG   (Germany)

Author keywords

authorization policy; dRBAC; e government; inter domain collaborations; XACML

Indexed keywords

AUTHORIZATION DECISION; AUTHORIZATION POLICY; DECENTRALIZED AUTHORIZATION; DECISION MAKERS; DIFFERENT DOMAINS; E-GOVERNMENT; HETEROGENEOUS SYSTEMS; INTER-DOMAIN; POLICY LANGUAGE; RUNTIME ENVIRONMENTS; SECURITY CHALLENGES;

DECISION MAKING; GOVERNMENT DATA PROCESSING; WEB SERVICES;

PUBLIC POLICY;

EID: 77953983442     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1314418.1314431     Document Type: Conference Paper

References (19)

1. Core and Hierarchical Role-based Access Control (RBAC) Profile of XACML v2.0. http://docs.oasis-open.org/xacml/2.0/access controlxacml- 2.0-rbac-profile1-spec-os.pdf, Feb. 2005, (Last visited on 8/23/2007).
2. eXtensible Access Control Markup Language (XACML) Version 2.0. http://docs.oasis-open.org/xacml/2.0/access controlxacml-2.0-core-spec-os.pdf, Feb. 2005, (Last visited on 8/23/2007).
3. A. D. A. Boujraf and M. Noble. Towards e-Administration in the Large (R4eGov). Deliverable WP3-D7, 2007.
4. A. Belokosztolszki, D. M. Eyers, and K. Moody. Policy Contexts: Controlling Information Flow in Parameterised RBAC. In Policy 2003: IEEE 4th International Workshop on Policies for Distributed Systems and Networks, pages 99-110, 2003.
5. A. Belokosztolszki and K. Moody. Meta-Policies for Distributed Role-Based Access Control Systems. In Policy 2002: IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, pages 106-115, 2002.
6. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The KeyNote Trust-Management System Version 2. RFC 2704, 1999.
7. T. Clark and R. Jones. Organisational Interoperability Maturity Model for C2. 1999 Command and Control Research and Technology Symposium, June 1999.
8. Y. Demchenko, C. de Laat, L. Gommans, and R. van Buuren. Domain Based Access Control Model for Distributed Collaborative Applications. In E-SCIENCE '06: Proceedings of the Second IEEE International Conference on e-Science and Grid Computing, page 24, Washington, DC, USA, 2006.
9. C. Ellison. SPKI Requirements. RFC 2692, September 1999.
10. E. Freudenthal, T. Pesin, L. Port, E. Keenan, and V. Karamcheti. dRBAC: Distributed Role-Based Access Control for Dynamic Coalition Environments, 2002.
11. J. Jin and G.-J. Ahn. Role-based Access Management for Ad-hoc Collaborative Sharing. SACMAT '06: Proceedings of the eleventh ACM symposium on Access control models and technologies, pages 200-209, 2006.
12. J. B. Joshi, R. Bhatti, E. Bertino, and A. Ghafoor. Access-Control Language for Multidomain Environments. IEEE Internet Computing, 08(6):40-50, 2004.
13. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a Role-based Trust Management Framework. In Proc. IEEE Symposium on Security and Privacy, Oakland, May 2002.
14. N. Li, J. C. Mitchell, W. H. Winsborough, K. E. Seamons, M. Halcrow, and J. Jacobson. RTML: A Role-based Trust-management Markup Language. Technical report, Purdue University, 2004.
15. J. Lopez, R. Oppliger, and G. Pernul. Authentication and Authorization Infrastructures (AAIs): a Comparative Survey. Computers & Security, Volume 23, Issue 7:578-590, 2004.
16. M. Ma and S. Woodhead. Constraint-Enabled Distributed RBAC for Subscription-Based Remote Network Services. In CIT '06: Proceedings of the Sixth IEEE International Conference on Computer and Information Technology (CIT'06), page 160, Washington, DC, USA, 2006. IEEE Computer Society.
17. J. S. Park, K. P. Costello, T. M. Neven, and J. A. Diosomito. A Composite RBAC Approach for Large, Complex Organizations. In SACMAT '04: Proceedings of the ninth ACM symposium on Access control models and technologies, pages 163-172, New York, NY, USA, 2004. ACM Press.
18. S. Piromruen and J. B. D. Joshi. An RBAC Framework for Time Constrained Secure Interoperation in Multi-domain Environment. IEEE Workshop on Object-oriented Real-time Databases (WORDS-2005), 2005.
19. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-Based Access Control Models. IEEE Computer, 29(2):38-47, 1996.