Decentralized user-role assignment for Web-based intranets
Published 1 October 1998
Ravi Sandhu, Joonsoo Park
Citations43
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
The main contribution of this paper is to extend the RBAC/Web system with the URA97 model for user-role assignment to decentralize the details of RBAC administration on the Web without losing central control over the system policy.
Abstract
The intricacy of security administration is one of the most challenging problems in large networked systems. This problem is especially serious in the Web environment, which consists of synthesis of technologies and composition of various constituents. Role-Based Access Control (RBAC) can reduce the complexity and cost of security administration in large networked applications. Using RBAC itself to manage RBAC provides additional administrative convenience. The main contribution of this paper is to extend the RBAC/Web system (developed at NIST) with the URA97 model for user-role assignment (developed at GMU) to decentralize the details of RBAC administration on the Web without losing central control over the system policy. 1
Keywords
Social SciencesComputer Science
ComputerRole-based access control models
5,757 Citations1996Ravi Sandhu, Edward J. Coyne +2 more
Why RBAC is receiving renewed attention as a method of security administration and review is explained, a framework of four reference models developed to better understandRBAC is described, and the use of RBAC to manage itself is discussed.
IEEE Communications MagazineKerberos: an authentication service for computer networks
1,332 Citations1994Clifford Neuman, T. Ts'o
The authors concentrate on authentication for real-time, interactive services that are offered on computer networks, which includes remote login, file system reads and writes, and information retrieval for applications like Mosaic.
Rationale for the RBAC96 family of access control models
125 Citations1996Ravi Sandhu
The rationale for the major decisions in developing the RBAC96 models is given and alternatives that were considered are discussed.
Access Rights Administration in Role-Based Security Systems
124 Citations1994Matunda Nyanchama, Sylvia L. Osborn
The role graph model, its operator semantics based on graph theory and algorithms for role administration are proposed and it is shown how the model simulates other organizational structures such as hierarchies and privilege graphs.
The ARBAC97 model for role-based administration of roles
111 Citations1997Ravi Sandhu, Venkata Bhamidipati +3 more
The motivation, intuition and outline of a new model for RBAC administration called ARBAC97 (administrative RBAC ‘97) are described, which incorporates URA97, builds upon it to define PRA97 and some components of R RA97, and introduces additional concepts in developing RRA97.
IEEE Internet ComputingA role-based access control for intranet security
83 Citations1997Zahir Tari, S.S.M. Chan
I-RBAC, role-based access control for intranet security which offers efficient security management based on varied levels of role authorizations is discussed.
Role Based Access Control for the World Wide Web
79 Citations1997John Barkley, Anthony Cincotta +3 more
This paper describes software components that provide RBAC for networked servers using WWW protocols and can be linked with commercially available web servers and require no modi cation of the server software.
A formal model for role-based access control with constraints
65 Citations2002Luigi Giuri, P. Iglio
The aim of this work is to give a formal foundation to the notion of role-based access control through the introduction of a new model and the formal specification of its semantics.
Computers & SecurityDesign for dynamic user-role-based security
38 Citations1994I. Al-Ghonaim Mohammed, David M. Dilts
This paper demonstrates how URBS can be used to augment the existing security mechanisms and presents an integrated method for the design of a dynamic, user-role-based security system.
Specifying and managing role-based access control within a corporate intranet
35 Citations1997David Ferraiolo, John Barkley
The purpose of RBAC on the Web would be to provide this access control service, thereby enabling the use of the Web for new and more sophisticated applications - to allow access to information and other resources that would otherwise not be possible given the existing lack of operational assurance.
IFIP advances in information and communication technologyThe URA97 Model for Role-Based User-Role Assignment
33 Citations1998Ravi Sandhu, Venkata Bhamidipati
This paper introduces a role-based administrative model, called URA97 (user-role assignment ’97), for assignment of users to roles inrole-based access control (RBAC).
Computers & SecurityThe management of computer security profiles using a role-oriented approach
28 Citations1994S.H. von Solms, Isak van der Merwe
A four-layered model is introduced which provides a framework for implementing the role-oriented approach in a company.
hyperDRIVE
9 Citations1997Larry S. Bartz
This work states that the widespread transition to Web-based and associated internet technology computing platforms has provided fertile ground for the germination and cultivation of authorization strategies, but none yet provides for the economical scalability necessary to support integrated internet or intranet computing environments which are composed of many applications, hosted by many servers.