Constrained role-based delegation

Longhua Zhang; Gail Joon Ahn

doi:10.1007/978-0-387-35691-4

Constrained role-based delegation

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Delegation is a promising alternative to traditional role administration paradigms in role-based systems. It empowers users to exercise discretion in how they use resources as it is in discretionary access control (DAC). Unlike the anarchy of DAC, in role-based access control (RBAC) higher-level organizational policies can be specified on roles to regulate user's action. Delegations and revocations are thus governed by these authorization policies. In this paper, we propose a policy approach for specifying and enforcing delegation authorizations. We present a mechanism for constructing authorization policies using a set of rules. Our rule-based language is flexible and powerful to specify and enforce authorization constraints. In addition, rules can also be used to define the exceptions for future actions and resolve possible conflicts.

Original language	English (US)
Title of host publication	Security and Privacy in the age of Uncertainty - IFIP TC11 18th International Conference on Information Security, SEC 2003
Publisher	Springer New York LLC
Pages	289-300
Number of pages	12
ISBN (Print)	9781475764895
DOIs	https://doi.org/10.1007/978-0-387-35691-4
State	Published - 2003
Externally published	Yes
Event	IFIP TC11 18th International Conference on Information Security, SEC 2003 - Athens, Greece Duration: May 26 2003 → May 28 2003

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	122
ISSN (Print)	1868-4238

Other

Other	IFIP TC11 18th International Conference on Information Security, SEC 2003
Country/Territory	Greece
City	Athens
Period	5/26/03 → 5/28/03

Keywords

Access control
Authorization constraints
Role-based delegation

ASJC Scopus subject areas

Information Systems
Computer Networks and Communications
Information Systems and Management

Access to Document

10.1007/978-0-387-35691-4

Cite this

Constrained role-based delegation. / Zhang, Longhua; Ahn, Gail Joon.
Security and Privacy in the age of Uncertainty - IFIP TC11 18th International Conference on Information Security, SEC 2003. Springer New York LLC, 2003. p. 289-300 (IFIP Advances in Information and Communication Technology; Vol. 122).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Zhang, L & Ahn, GJ 2003, Constrained role-based delegation. in Security and Privacy in the age of Uncertainty - IFIP TC11 18th International Conference on Information Security, SEC 2003. IFIP Advances in Information and Communication Technology, vol. 122, Springer New York LLC, pp. 289-300, IFIP TC11 18th International Conference on Information Security, SEC 2003, Athens, Greece, 5/26/03. https://doi.org/10.1007/978-0-387-35691-4

@inproceedings{2bcc37485ddc474fb5af20b425df2e56,

title = "Constrained role-based delegation",

abstract = "Delegation is a promising alternative to traditional role administration paradigms in role-based systems. It empowers users to exercise discretion in how they use resources as it is in discretionary access control (DAC). Unlike the anarchy of DAC, in role-based access control (RBAC) higher-level organizational policies can be specified on roles to regulate user's action. Delegations and revocations are thus governed by these authorization policies. In this paper, we propose a policy approach for specifying and enforcing delegation authorizations. We present a mechanism for constructing authorization policies using a set of rules. Our rule-based language is flexible and powerful to specify and enforce authorization constraints. In addition, rules can also be used to define the exceptions for future actions and resolve possible conflicts.",

keywords = "Access control, Authorization constraints, Role-based delegation",

author = "Longhua Zhang and Ahn, {Gail Joon}",

year = "2003",

doi = "10.1007/978-0-387-35691-4",

language = "English (US)",

isbn = "9781475764895",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer New York LLC",

pages = "289--300",

booktitle = "Security and Privacy in the age of Uncertainty - IFIP TC11 18th International Conference on Information Security, SEC 2003",

note = "IFIP TC11 18th International Conference on Information Security, SEC 2003 ; Conference date: 26-05-2003 Through 28-05-2003",

}

TY - GEN

T1 - Constrained role-based delegation

AU - Zhang, Longhua

AU - Ahn, Gail Joon

PY - 2003

Y1 - 2003

N2 - Delegation is a promising alternative to traditional role administration paradigms in role-based systems. It empowers users to exercise discretion in how they use resources as it is in discretionary access control (DAC). Unlike the anarchy of DAC, in role-based access control (RBAC) higher-level organizational policies can be specified on roles to regulate user's action. Delegations and revocations are thus governed by these authorization policies. In this paper, we propose a policy approach for specifying and enforcing delegation authorizations. We present a mechanism for constructing authorization policies using a set of rules. Our rule-based language is flexible and powerful to specify and enforce authorization constraints. In addition, rules can also be used to define the exceptions for future actions and resolve possible conflicts.

AB - Delegation is a promising alternative to traditional role administration paradigms in role-based systems. It empowers users to exercise discretion in how they use resources as it is in discretionary access control (DAC). Unlike the anarchy of DAC, in role-based access control (RBAC) higher-level organizational policies can be specified on roles to regulate user's action. Delegations and revocations are thus governed by these authorization policies. In this paper, we propose a policy approach for specifying and enforcing delegation authorizations. We present a mechanism for constructing authorization policies using a set of rules. Our rule-based language is flexible and powerful to specify and enforce authorization constraints. In addition, rules can also be used to define the exceptions for future actions and resolve possible conflicts.

KW - Access control

KW - Authorization constraints

KW - Role-based delegation

UR - http://www.scopus.com/inward/record.url?scp=84904282903&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84904282903&partnerID=8YFLogxK

U2 - 10.1007/978-0-387-35691-4

DO - 10.1007/978-0-387-35691-4

M3 - Conference contribution

AN - SCOPUS:84904282903

SN - 9781475764895

T3 - IFIP Advances in Information and Communication Technology

SP - 289

EP - 300

BT - Security and Privacy in the age of Uncertainty - IFIP TC11 18th International Conference on Information Security, SEC 2003

PB - Springer New York LLC

T2 - IFIP TC11 18th International Conference on Information Security, SEC 2003

Y2 - 26 May 2003 through 28 May 2003

ER -

Constrained role-based delegation

Abstract

Publication series

Other

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this