Dynamic delegation framework for role based access control in distributed data management systems

Title: Dynamic delegation framework for role based access control in distributed data management systems
Creator: Ruan, Chun; Varadharajan, Vijay
Relation: Distributed and Parallel Databases Vol. 32, Issue 2, p. 245-269
Publisher Link: http://dx.doi.org/10.1007/s10619-012-7120-4
Publisher: Springer
Resource Type: journal article
Date: 2014
Description: This paper proposes a logic based framework that extends role based access control systems with dynamic delegation in a decentralised environment. It allows delegation of administrative privileges for both roles and access rights between roles. We have introduced the notion of trust in delegation and have shown how extended logic programs can be used to express and reason about roles and their delegations with trust degrees, roles’ privileges and their propagations, delegation depth as well as conflict resolution. Furthermore, our framework is able to enforce various role constraints such as separation of duties, role composition and cardinality constraints. The implementation of the framework is also discussed. The proposed framework is flexible and provides a sound basis for specifying and evaluating sophisticated role based access control policies in decentralised environments.
Subject: role based access control; privilege delegation; logic programs
Identifier: http://hdl.handle.net/1959.13/1356152
Identifier: uon:31623
Identifier: ISSN:0926-8782
Language: eng
Reviewed

		Thumbnail	File	Description	Size	Format