Constraints for Permission-Based Delegations Export

@inproceedings{Shang2008, abstract = {Permission-Based Delegation Model (PBDM) is a flexible model for delegation of authority in RBAC. It supports permission level delegation through temporary delegation roles. Multi-step delegation is also supported. However, constraints for PBDM have not been investigated in the literature, and it is not secure for a system to employ PBDM without constraints considered. We present a Constraints model for user-user Permission-Based Delegation (CPBD) to secure such systems. Delegation roles bring violation of the security based on the constraints specified on regular roles. In CPBD, these constraints are extended to involve delegation roles by the new concept of source regular role, and this extension ensures the security based on constrains. Authorization constraints on delegation roles are also considered to satisfy secure requirements of users. For security administrators to obtain more control of delegations, constraints on permission-based delegation itself are provided, in particular, maximum delegation depth and maximum delegation range.}, author = {Shang, Qinghua and Wang, Xingang}, citeulike-article-id = {6107936}, citeulike-linkout-0 = {http://dx.doi.org/10.1109/CIT.2008.Workshops.75}, citeulike-linkout-1 = {http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4568506}, day = {18}, doi = {10.1109/CIT.2008.Workshops.75}, journal = {Computer and Information Technology Workshops, 2008. CIT Workshops 2008. IEEE 8th International Conference on}, keywords = {delegation, rbac}, month = {July}, pages = {216--223}, posted-at = {2009-11-13 07:44:17}, priority = {2}, title = {Constraints for Permission-Based Delegations}, url = {http://dx.doi.org/10.1109/CIT.2008.Workshops.75}, year = {2008} }

TY - CONF ID - Shang2008 L3 - citeulike-article-id:6107936 N2 - Permission-Based Delegation Model (PBDM) is a flexible model for delegation of authority in RBAC. It supports permission level delegation through temporary delegation roles. Multi-step delegation is also supported. However, constraints for PBDM have not been investigated in the literature, and it is not secure for a system to employ PBDM without constraints considered. We present a Constraints model for user-user Permission-Based Delegation (CPBD) to secure such systems. Delegation roles bring violation of the security based on the constraints specified on regular roles. In CPBD, these constraints are extended to involve delegation roles by the new concept of source regular role, and this extension ensures the security based on constrains. Authorization constraints on delegation roles are also considered to satisfy secure requirements of users. For security administrators to obtain more control of delegations, constraints on permission-based delegation itself are provided, in particular, maximum delegation depth and maximum delegation range. JF - Computer and Information Technology Workshops, 2008. CIT Workshops 2008. IEEE 8th International Conference on EP - 223 TI - Constraints for Permission-Based Delegations SP - 216 KW - delegation KW - rbac AU - Shang, Qinghua AU - Wang, Xingang PY - 2008/July/18/ UR - http://dx.doi.org/10.1109/CIT.2008.Workshops.75 ER -