Cited By
View all- Hu JLi RLu ZLu JMa X(2011)RARFuture Generation Computer Systems10.1016/j.future.2010.09.00827:5(574-586)Online publication date: 1-May-2011
Establishing RBAC-based secure interoperability in decentralized multi-domain environments
Authors: 
Jinwei Hu, 
Ruixuan Li, Zhengding LuAuthors Info & Claims
Pages 49 - 63
Abstract
Establishing interoperability is the first and foremost problem of secure interoperation in multi-domain environments. In this paper, we propose a framework to facilitate the establishment of secure interoperability in decentralized multi-domain environments, which employ Role-Based Access Control (RBAC) policies. In particular, we propose a method for setting up interoperating relationships between domains by combining role mappings and assignments of permissions to foreign roles. A key challenge in the establishment of secure interoperability is to guarantee security of individual domains in presence of interoperation. We present rules which regulate the interoperability. These rules ensure that constraints of RBAC policies are respected when cross-domain accesses are allowed.
References
[1]
Bonatti, P., Sapino, M., Subrahmanian, V.: Merging heterogeneous security orderings. In: Proceedings of the 4th European Symposium on Research in Computer Security, Rome, Italy, pp. 183-197 (September 1996).
[2]
Chen, H., Li, N.: Constraint generation for separation of duty. In: ACM Symposium on Access Control Models and Technologies, Lake Tahoe, California, USA, pp. 130-138. ACM Press, New York (2006).
[3]
Clark, D.D., Wilson, D.R.: A comparison of commercial and military computer security policies. In: IEEE Symposium on Security and Privacy, pp. 184-195. IEEE Computer Society Press, Los Alamitos (1987).
[4]
Dawson, S., Qian, S., Samarati, P.: Providing security and interoperation of heterogeneous systems. Distributed and Parallel Databases 8(1), 119-145 (2000).
[5]
Du, S., Joshi, J.B.D.: Supporting authorization query and inter-domain role mapping in presence of hybrid role hierarchy. In: ACM Symposium on Access Control Models and Technologies, pp. 228-236. ACM Press, New York (2006).
[6]
Ferraiolo, D.F., Sandhu, R.S., Gavrila, S.I., Kuhn, D.R., Chandramouli, R.: Proposed NIST standard for role-based access control. ACM Trans. Inf. Syst. Secur. 4(3), 224-274 (2001).
[7]
Gong, L., Qian, X.: Computational issues in secure interoperation. Software Engineering, IEEE Transactions on 22(1), 43-52 (1996).
[8]
Jin, J., Ahn, G.-J.: Role-based access management for ad-hoc collaborative sharing. In: ACM Symposium on Access Control Models and Technologies, pp. 200-209. ACM Press, New York (2006).
[9]
Kapadia, A., Al-Muhtadi, J., Campbell, R.H., Mickunas, M.D.: IRBAC 2000: Secure interoperability using dynamic role translation. In: Proceedings of the 1st International Conference on Internet Computing, pp. 231-238 (2000).
[10]
Li, N., Bizri, Z., Tripunitara, M.V.: On mutually-exclusive roles and separation of duty. In: ACM Conference on Computer and Communications Security, pp. 42-51. ACM Press, New York (2004).
[11]
Pan, C.-C., Mitra, P., Liu, P.: Semantic access control for information interoperation. In: ACM Symposium on Access Control Models and Technologies, pp. 237-246. ACM Press, New York (2006).
[12]
Piromruen, S., Joshi, J.B.D.: An RBAC framework for time constrained secure interoperation in multi-domain environments. In: the 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems, pp. 36-45. IEEE Computer Society Press, Los Alamitos (2005).
[13]
Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. IEEE Computer 29(2), 38-47 (1996).
[14]
Shafiq, B., Joshi, J., Bertino, E., Ghafoor, A.: Secure interoperation in a multidomain environment employing rbac policies. IEEE Trans. Knowl. Data Eng. 17(11), 1557-1577 (2005).
[15]
Shehab, M., Bertino, E., Ghafoor, A.: Secure collaboration in mediator-free environments. In: ACM Conference on Computer and Communications Security, pp. 58-67. ACM Press, New York (2005).
[16]
Shehab, M., Bertino, E., Ghafoor, A.: SERAT: SEcure Role mApping Technique for decentralized secure interoperability. In: ACM Symposium on Access Control Models and Technologies, pp. 159-167. ACM Press, New York (2005).
Index Terms
- Establishing RBAC-based secure interoperability in decentralized multi-domain environments
Index terms have been assigned to the content through auto-classification.
Recommendations
Establishing RBAC-Based Secure Interoperability in Decentralized Multi-domain Environments
Information Security and Cryptology - ICISC 2007AbstractEstablishing interoperability is the first and foremost problem of secure interoperation in multi-domain environments. In this paper, we propose a framework to facilitate the establishment of secure interoperability in decentralized multi-domain ...
Trust Propagation Policy for Secure Interoperability in Multi-domain Environments
ICIII '08: Proceedings of the 2008 International Conference on Information Management, Innovation Management and Industrial Engineering - Volume 03Access control is one of the most important issues of secure interoperability between domains. Role-based access control (RBAC) is a technology that has been proposed as an alternative approach to traditional access control mechanisms both to simplify ...
An RBAC Implementation and Interoperability Standard: The INCITS Cyber Security 1.1 Model
An operational definition for role-based access control (RBAC) is that permission assignment is based on the role a principal is assuming during a work session. The central underlying concept is thus that IT permissions are assigned to roles rather than ...
Comments
Please enable JavaScript to view thecomments powered by Disqus.Information & Contributors
Information
Published In
Sponsors
- KISIA
- CIST
- STG Security
- NICS Tech
- NITGEN
In-Cooperation
- MIC: Ministry of Information and Communication
Publisher
Springer-Verlag
Berlin, Heidelberg
Publication History
Published: 29 November 2007
Qualifiers
- Article
Contributors
Other Metrics
Bibliometrics & Citations
Bibliometrics
Article Metrics
- View Citations1Total Citations
- 8Total Downloads
- Downloads (Last 12 months)0
- Downloads (Last 6 weeks)0
Reflects downloads up to 20 Dec 2024
Other Metrics
Citations
Cited By
View all- Hu JLi RLu ZLu JMa X(2011)RARFuture Generation Computer Systems10.1016/j.future.2010.09.00827:5(574-586)Online publication date: 1-May-2011