Implementing Advanced RBAC Administration Functionality with USE

  • Role-based access control (RBAC) is a powerful means for laying out and developing higher-level organizational policies such as separation of duty, and for simplifying the security management process. One of the important aspects of RBAC is authorization constraints that express such organizational policies. While RBAC has generated a great interest in the security community, organizations still seek a flexible and effective approach to impose role-based authorization constraints in their securiRole-based access control (RBAC) is a powerful means for laying out and developing higher-level organizational policies such as separation of duty, and for simplifying the security management process. One of the important aspects of RBAC is authorization constraints that express such organizational policies. While RBAC has generated a great interest in the security community, organizations still seek a flexible and effective approach to impose role-based authorization constraints in their security-critical applications. In particular, today often only basic RBAC concepts have found their way into commercial RBAC products; specifically, authorization constraints are not widely supported. In this paper, we present an RBAC administration tool that can enforce certain kinds of role-based authorization constraints such as separation of duty constraints. The authorization constraint functionality is based upon the OCL validation tool USE. We also describe our practical experience that we gained on integrating OCL functionality into a prototype of an RBAC administration tool that shall be extended to a product in the future.show moreshow less

Download full text files

Export metadata

  • Export Bibtex
  • Export RIS

Additional Services

Share in Twitter Search Google Scholar
Metadaten
Author: Mustafa Tanveer, Karsten Sohr, Duc-Hanh Dang, Michael Drouineaud, Stefan Kowski
URN:urn:nbn:de:kobv:83-opus-30942
ISBN:1863-2122
Series (Serial Number):Electronic Communications of the EASST- ECEASST (15/07)
Document Type:Arbeitspapier/Research Paper
Language:English
Date of Publication (online):2011/06/21
Publishing Institution:Technische Universität Berlin
Release Date:2011/06/21
Tag:Authorization constraints; Object Constraint Language; Role-based access control
Authorization constraints; Object Constraint Language; Role-based access control
Note:
http://journal.ub.tu-berlin.de/eceasst/article/view/177/
Institutes:Institut für Softwaretechnik und Theoretische Informatik
Dewey Decimal Classification:004 Datenverarbeitung; Informatik
Collection:Volume 15 (2008): OCL Concepts and Tools 2008
Licence (German):License Logo CC BY-NC-SA: Creative Commons-Lizenz: Namensnennung, nicht kommerziell, Weitergabe zu gleichen Bedingungen