http://dx.doi.org/10.1002/wcm.700">
 

Document Type

Journal Article

Department/Unit

Department of Computer Science

Title

Homonymous role in role-based discretionary access control

Language

English

Abstract

The access control model is a core aspect of trusted information systems. Based on the role based access control (RBAC) model, we put forward the concept of the homonymous role, which extends the role control categories in RBAC, balances the control granularity and the storage space requirements, and executes the fine-grained access control. Instead of the traditional global access control policies (GACP), we propose the homonymous control domain (HCD) mechanism to enable the coexistence of multiple types of access control policies in a single system, thereby improving the control granularity and flexibility. The HCD mechanism facilitates the discretionary supporting of independent access control policies for its homonymous user. The HCD mechanism and the traditional access control mechanism can be linked to construct a two-layer access control policy mechanism for a system. Notably, we also consider the temporal characteristic in HCD, which is a critical feature of modern access control models. Furthermore, we analyze the conflicts between the HCD and GACP mechanisms. Finally, we design and implement our HCD on FreeBSD to demonstrate the advantages of the two-layer access control mechanism. © 2008 John Wiley & Sons, Ltd.

Keywords

Discretionary access control, Homonymous role, Role based access control

Publication Date

2009

Source Publication Title

Wireless Communications and Mobile Computing

Volume

9

Issue

9

Start Page

1287

End Page

1300

Publisher

Wiley

ISSN (print)

15308669

ISSN (electronic)

15308677

This document is currently not available here.

Share

COinS