ABDM: An extended flexible delegation model in RBAC Export

@inproceedings{Li2008a, abstract = {Role-based access control (RBAC) is recognized as an efficient access control model and its delegation authority has been proved to be flexible and useful for information sharing on distributed environment. In todaypsilas highly dynamic distributed systems, collaboration is necessary for information sharing with others, so a user may want to delegate a collection of permissions, named an ability, to another user or all members of a group. Based on this fact, this paper builds a new ability-based delegation model (ABDM) within RBAC and develops its delegation algorithm. The framework includes both ability-based user-user delegation and user-group delegation. Further, we analyze delegation granting and revocation authorization. Compared with other existing delegation models, this ability-based delegation model provides great flexibility in authority management.}, author = {Li, Min and Wang, Hua}, citeulike-article-id = {6107931}, citeulike-linkout-0 = {http://dx.doi.org/10.1109/CIT.2008.4594707}, citeulike-linkout-1 = {http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4594707}, day = {08}, doi = {10.1109/CIT.2008.4594707}, journal = {Computer and Information Technology, 2008. CIT 2008. 8th IEEE International Conference on}, keywords = {delegation, rbac}, month = {August}, pages = {390--395}, posted-at = {2009-11-13 07:41:39}, priority = {2}, title = {ABDM: An extended flexible delegation model in RBAC}, url = {http://dx.doi.org/10.1109/CIT.2008.4594707}, year = {2008} }

TY - CONF ID - Li2008a L3 - citeulike-article-id:6107931 N2 - Role-based access control (RBAC) is recognized as an efficient access control model and its delegation authority has been proved to be flexible and useful for information sharing on distributed environment. In todaypsilas highly dynamic distributed systems, collaboration is necessary for information sharing with others, so a user may want to delegate a collection of permissions, named an ability, to another user or all members of a group. Based on this fact, this paper builds a new ability-based delegation model (ABDM) within RBAC and develops its delegation algorithm. The framework includes both ability-based user-user delegation and user-group delegation. Further, we analyze delegation granting and revocation authorization. Compared with other existing delegation models, this ability-based delegation model provides great flexibility in authority management. JF - Computer and Information Technology, 2008. CIT 2008. 8th IEEE International Conference on EP - 395 TI - ABDM: An extended flexible delegation model in RBAC SP - 390 KW - delegation KW - rbac AU - Li, Min AU - Wang, Hua PY - 2008/August/08/ UR - http://dx.doi.org/10.1109/CIT.2008.4594707 ER -