Attributes Enhanced Role-Based Access Control Model

Qasim Mahmood Rajpoot; Christian D. Jensen; Ram  Krishnan

doi:10.1007/978-3-319-22906-5_1

Attributes Enhanced Role-Based Access Control Model

Qasim Mahmood Rajpoot, Christian D. Jensen, Ram Krishnan

University of Texas at Dallas

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

2890 Downloads (Pure)

Abstract

Attribute-based access control (ABAC) and role-based access control (RBAC) are currently the two most popular access control models. Yet, they both have known limitations and offer features com-
plimentary to each other. Due to this fact, integration of RBAC and ABAC has recently emerged as an important area of research. In this paper, we propose an access control model that combines the two models in a novel way in order to unify their benefits. Our approach provides a fine-grained access control mechanism that not only takes contextual information into account while making the access control decisions but is also suitable for applications where access to resources is controlled by exploiting contents of the resources in the policy.

Original language	English
Title of host publication	Proceedings of the 12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15)
Editors	Simone Fischer-Huebner, Costas Lambrinoudakis
Publisher	Springer
Publication date	2015
Pages	3-17
ISBN (Print)	978-3-319-22905-8
ISBN (Electronic)	978-3-319-22906-5
DOIs	https://doi.org/10.1007/978-3-319-22906-5_1
Publication status	Published - 2015
Event	12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15) - Valencia, Spain Duration: 1 Sept 2015 → 2 Sept 2015 Conference number: 12 http://www.ds.unipi.gr/trustbus15/

Conference

Conference	12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15)
Number	12
Country/Territory	Spain
City	Valencia
Period	01/09/2015 → 02/09/2015
Internet address	http://www.ds.unipi.gr/trustbus15/

Series	Lecture Notes in Computer Science
Volume	9264
ISSN	0302-9743

Keywords

Context-aware access control
RBAC
Attributes
Content-based access control
Role-permission explosion
Role-explosion

Access to Document

10.1007/978-3-319-22906-5_1

AERBAC TrustBus 20150618 Accepted author manuscript, 278 KB

OpenUrl availability

Full text

Cite this

@inproceedings{4801ca09f30c4d39b3e642ecccde612a,

title = "Attributes Enhanced Role-Based Access Control Model",

abstract = "Attribute-based access control (ABAC) and role-based access control (RBAC) are currently the two most popular access control models. Yet, they both have known limitations and offer features com-plimentary to each other. Due to this fact, integration of RBAC and ABAC has recently emerged as an important area of research. In this paper, we propose an access control model that combines the two models in a novel way in order to unify their benefits. Our approach provides a fine-grained access control mechanism that not only takes contextual information into account while making the access control decisions but is also suitable for applications where access to resources is controlled by exploiting contents of the resources in the policy.",

keywords = "Context-aware access control, RBAC, Attributes, Content-based access control, Role-permission explosion, Role-explosion",

author = "{Mahmood Rajpoot}, Qasim and Jensen, {Christian D.} and Ram Krishnan",

year = "2015",

doi = "10.1007/978-3-319-22906-5_1",

language = "English",

isbn = "978-3-319-22905-8",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "3--17",

editor = "Simone Fischer-Huebner and Lambrinoudakis, {Costas }",

booktitle = "Proceedings of the 12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus{\textquoteright}15)",

note = "12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus{\textquoteright}15), TrustBus ; Conference date: 01-09-2015 Through 02-09-2015",

url = "http://www.ds.unipi.gr/trustbus15/",

}

Mahmood Rajpoot, Q, Jensen, CD & Krishnan, R 2015, Attributes Enhanced Role-Based Access Control Model. in S Fischer-Huebner & C Lambrinoudakis (eds), Proceedings of the 12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15). Springer, Lecture Notes in Computer Science, vol. 9264, pp. 3-17, 12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15), Valencia, Spain, 01/09/2015. https://doi.org/10.1007/978-3-319-22906-5_1

Attributes Enhanced Role-Based Access Control Model. / Mahmood Rajpoot, Qasim; Jensen, Christian D.; Krishnan, Ram .
Proceedings of the 12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15). ed. / Simone Fischer-Huebner; Costas Lambrinoudakis. Springer, 2015. p. 3-17 (Lecture Notes in Computer Science, Vol. 9264).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Attributes Enhanced Role-Based Access Control Model

AU - Mahmood Rajpoot, Qasim

AU - Jensen, Christian D.

AU - Krishnan, Ram

N1 - Conference code: 12

PY - 2015

Y1 - 2015

N2 - Attribute-based access control (ABAC) and role-based access control (RBAC) are currently the two most popular access control models. Yet, they both have known limitations and offer features com-plimentary to each other. Due to this fact, integration of RBAC and ABAC has recently emerged as an important area of research. In this paper, we propose an access control model that combines the two models in a novel way in order to unify their benefits. Our approach provides a fine-grained access control mechanism that not only takes contextual information into account while making the access control decisions but is also suitable for applications where access to resources is controlled by exploiting contents of the resources in the policy.

AB - Attribute-based access control (ABAC) and role-based access control (RBAC) are currently the two most popular access control models. Yet, they both have known limitations and offer features com-plimentary to each other. Due to this fact, integration of RBAC and ABAC has recently emerged as an important area of research. In this paper, we propose an access control model that combines the two models in a novel way in order to unify their benefits. Our approach provides a fine-grained access control mechanism that not only takes contextual information into account while making the access control decisions but is also suitable for applications where access to resources is controlled by exploiting contents of the resources in the policy.

KW - Context-aware access control

KW - RBAC

KW - Attributes

KW - Content-based access control

KW - Role-permission explosion

KW - Role-explosion

U2 - 10.1007/978-3-319-22906-5_1

DO - 10.1007/978-3-319-22906-5_1

M3 - Article in proceedings

SN - 978-3-319-22905-8

T3 - Lecture Notes in Computer Science

SP - 3

EP - 17

BT - Proceedings of the 12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15)

A2 - Fischer-Huebner, Simone

A2 - Lambrinoudakis, Costas

PB - Springer

T2 - 12th International Conference on Trust, Privacy and Security in Digital Business (TrustBus’15)

Y2 - 1 September 2015 through 2 September 2015

ER -

Attributes Enhanced Role-Based Access Control Model

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this