Separation of Duty in Role-Based Access Control Model through Fuzzy Relations

2007 ◽  
Author(s):  
Hassan Takabi ◽  
Morteza Amini ◽  
Rasool Jalili
Keyword(s):  
Access Control ◽  
Control Model ◽  
Role Based Access Control ◽  
Fuzzy Relations ◽  
Access Control Model ◽  
Separation Of Duty ◽  
Role Based

scholarly journals Permission-Based Separation of Duty in Dynamic Role-Based Access Control Model

Symmetry ◽  
2019 ◽  
Vol 11 (5) ◽  
pp. 669 ◽  
Author(s):  
Muhammad Umar Aftab ◽  
Zhiguang Qin ◽  
Negalign Wake Hundera ◽  
Oluwasanmi Ariyo ◽  
Zakria ◽  
...  
Keyword(s):  
Access Control ◽  
Dominant Role ◽  
Control Model ◽  
Role Based Access Control ◽  
Access Control Model ◽  
Least Privilege ◽  
Major Development ◽  
Separation Of Duty ◽  
Attribute Based Access Control ◽  
Role Based

A major development in the field of access control is the dominant role-based access control (RBAC) scheme. The fascination of RBAC lies in its enhanced security along with the concept of roles. In addition, attribute-based access control (ABAC) is added to the access control models, which is famous for its dynamic behavior. Separation of duty (SOD) is used for enforcing least privilege concept in RBAC and ABAC. Moreover, SOD is a powerful tool that is used to protect an organization from internal security attacks and threats. Different problems have been found in the implementation of SOD at the role level. This paper discusses that the implementation of SOD on the level of roles is not a good option. Therefore, this paper proposes a hybrid access control model to implement SOD on the basis of permissions. The first part of the proposed model is based on the addition of attributes with dynamic characteristics in the RBAC model, whereas the second part of the model implements the permission-based SOD in dynamic RBAC model. Moreover, in comparison with previous models, performance and feature analysis are performed to show the strength of dynamic RBAC model. This model improves the performance of the RBAC model in terms of time, dynamicity, and automatic permissions and roles assignment. At the same time, this model also reduces the administrator’s load and provides a flexible, dynamic, and secure access control model.

Sign in / Sign up

Export Citation Format

Share Document