An extended role-based access control model for delegating obligations - IMT Atlantique Accéder directement au contenu
Article Dans Une Revue Lecture Notes in Computer Science Année : 2009

An extended role-based access control model for delegating obligations

Résumé

The main aim of access control models is to provide means to simplify the management of the security policy, which is a fastidious and error-prone task. Supporting delegation is considered as an important mean to decentralize the administration and therefore to allow security policy to be more flexible and easier to manipulate. Our main contribution is the proposition of a unified model to the administration and delegation of obligations. Managing such delegations implies more requirements than managing traditional privileges delegation. In fact, the delegation of obligations may include two interpretations: the delegation of the obligation and the delegation of the responsibility related to this obligation. Moreover, since delegating an obligation involves the delegation of sanctions, then the consent of the user who receives this delegation may be required in some cases. We address in this paper these requirements and we propose a formalism to deal with them.

Dates et versions

hal-00450164 , version 1 (25-01-2010)

Identifiants

Citer

Meriam Ben Ghorbel, Frédéric Cuppens, Nora Cuppens-Boulahia, Adel Bouhoula. An extended role-based access control model for delegating obligations. Lecture Notes in Computer Science, 2009, 5695 (127), pp.137. ⟨10.1007/978-3-642-03748-1_13⟩. ⟨hal-00450164⟩
119 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More