Meta Model Based Integration of Role-Based and Discretionary Access Control Using Path Expressions

2006 ◽  
Author(s):  
K. Lehmann ◽  
F. Matthes
Keyword(s):  
Access Control ◽  
Meta Model ◽  
Discretionary Access Control ◽  
Model Based ◽  
Role Based

scholarly journals Automated Model-Based Testing of Role-Based Access Control Using Predicate/Transition Nets

2015 ◽  
Vol 64 (9) ◽  
pp. 2490-2505 ◽  
Author(s):  
Dianxiang Xu ◽  
Michael Kent ◽  
Lijo Thomas ◽  
Tejeddine Mouelhi ◽  
Yves Le Traon
Keyword(s):  
Access Control ◽  
Role Based Access Control ◽  
Model Based ◽  
Model Based Testing ◽  
Role Based

scholarly journals Secure Exchange of Electronic Health Records

2012 ◽  
pp. 1403-1424
Author(s):  
Alejandro Enrique Flores ◽  
Khin Than Win ◽  
Willy Susilo
Keyword(s):  
Health Care ◽  
Access Control ◽  
Electronic Health Records ◽  
Shared Care ◽  
Health Records ◽  
Discretionary Access Control ◽  
Attribute Based Encryption ◽  
Electronic Health ◽  
Role Based ◽  
Traditional Approaches

Protecting the confidentiality of a patient’s information in a shared care environment could become a complex task. Correct identification of users, assigning of access permissions, and resolution of conflict rise as main points of interest in providing solutions for data exchange among health care providers. Traditional approaches such as Mandatory Access Control, Discretionary Access control and Role-Based Access Control policies do not always provide a suitable solution for health care settings, especially for shared care environments. The core of this contribution consists in the description of an approach which uses attribute-based encryption to protect the confidentiality of patients’ information during the exchange of electronic health records among healthcare providers. Attribute-based encryption allows the reinforcing of access policies and reduces the risk of unauthorized access to sensitive information; it also provides a set of functionalities which are described using a case study. Attribute-based encryption provides an answer to restrictions presented by traditional approaches and facilitate the reinforcing of existing security policies over the transmitted data.

On the Homonymous Role in Role-Based Discretionary Access Control

2007 ◽  
pp. 313-322 ◽  
Author(s):  
Kai Ouyang ◽  
Xiaowen Chu ◽  
Yixin Jiang ◽  
Hsiao-Hwa Chen ◽  
Jiangchuan Liu
Keyword(s):  
Access Control ◽  
Discretionary Access Control ◽  
Role Based

Access Control Framework for Cloud Computing

2019 ◽  
pp. 698-711
Author(s):  
Kashif Munir ◽  
Lawan A. Mohammed
Keyword(s):  
Cloud Computing ◽  
Access Control ◽  
Role Based Access Control ◽  
Discretionary Access Control ◽  
Job Functions ◽  
Access Control Models ◽  
Control Models ◽  
Control Framework ◽  
Role Based ◽  
Access Privileges

Access control is generally a rule or procedure that allows, denies, restricts or limit access to system's resources. It may, as well, monitor and record all attempts made to access a system. Access Control may also identify users attempting to access unauthorized resources. It is a mechanism which is very much important for protection in computer security. Various access control models are in use, including the most common Mandatory Access Control (MAC), Discretionary Access Control (DAC) and Role Based Access Control (RBAC). All these models are known as identity based access control models. In all these access control models, user (subjects) and resources (objects) are identified by unique names. Identification may be done directly or through roles assigned to the subjects. These access control methods are effective in unchangeable distributed system, where there are only a set of Users with a known set of services. For this reason, we propose a framework which is well suited to many situations in cloud computing where users or applications can be clearly separated according to their job functions. In this chapter, we proposes a role based access control framework with various features including security of sensitive data, authorization policy and secure data from hackers. Our proposed role based access control algorithm provides tailored and fine level of user access control services without adding complexity, and supports access privileges updates dynamically when a user's role is added or updated.

scholarly journals Risk aware Access Control model for Trust Based collaborative organizations in cloud

2018 ◽  
Vol 7 (4.6) ◽  
pp. 49
Author(s):  
Rajanikanth Aluvalu ◽  
Krishna Keerthi Chennam ◽  
M. A.Jabbar ◽  
Shaik Sarfaraz Ahamed
Keyword(s):  
Access Control ◽  
Trust Management ◽  
Critical Issue ◽  
Trust Model ◽  
Control Model ◽  
Role Based Access Control ◽  
Access Control Model ◽  
Discretionary Access Control ◽  
Access Control Models ◽  
Role Based

Secure interactions between collaborative organizations having their applications and data stored in “Cloud Computing” are a critical issue. Access control is the biggest challenge and trust is regarded as an essential secured relationship within a distributed system. Basic access control models, like Discretionary Access Control, Mandatory Access Control, and Role Based Access Control, cannot satisfy requirements in such environment, and need some improvements. During the collaboration, the attitude of the user may change. Therefore, in this context, adding trust management to an access control model is mandatory. To achieve this goal, in this paper, a new trust model to control access in the cloud is proposed. The aim is to monitor in real-time security for collaborative organizations, having decided to migrate to the cloud.  

scholarly journals Secure Exchange of Electronic Health Records

2013 ◽  
pp. 1059-1079
Author(s):  
Alejandro Enrique Flores ◽  
Khin Than Win ◽  
Willy Susilo
Keyword(s):  
Health Care ◽  
Access Control ◽  
Electronic Health Records ◽  
Shared Care ◽  
Health Records ◽  
Discretionary Access Control ◽  
Attribute Based Encryption ◽  
Electronic Health ◽  
Role Based ◽  
Traditional Approaches

Protecting the confidentiality of a patient’s information in a shared care environment could become a complex task. Correct identification of users, assigning of access permissions, and resolution of conflict rise as main points of interest in providing solutions for data exchange among health care providers. Traditional approaches such as Mandatory Access Control, Discretionary Access control and Role-Based Access Control policies do not always provide a suitable solution for health care settings, especially for shared care environments. The core of this contribution consists in the description of an approach which uses attribute-based encryption to protect the confidentiality of patients’ information during the exchange of electronic health records among healthcare providers. Attribute-based encryption allows the reinforcing of access policies and reduces the risk of unauthorized access to sensitive information; it also provides a set of functionalities which are described using a case study. Attribute-based encryption provides an answer to restrictions presented by traditional approaches and facilitate the reinforcing of existing security policies over the transmitted data.

Access Control Framework for Cloud Computing

2015 ◽  
pp. 314-325
Author(s):  
Kashif Munir ◽  
Lawan A. Mohammed
Keyword(s):  
Cloud Computing ◽  
Access Control ◽  
Role Based Access Control ◽  
Discretionary Access Control ◽  
Job Functions ◽  
Access Control Models ◽  
Control Models ◽  
Control Framework ◽  
Role Based ◽  
Access Privileges

Access control is generally a rule or procedure that allows, denies, restricts or limit access to system's resources. It may, as well, monitor and record all attempts made to access a system. Access Control may also identify users attempting to access unauthorized resources. It is a mechanism which is very much important for protection in computer security. Various access control models are in use, including the most common Mandatory Access Control (MAC), Discretionary Access Control (DAC) and Role Based Access Control (RBAC). All these models are known as identity based access control models. In all these access control models, user (subjects) and resources (objects) are identified by unique names. Identification may be done directly or through roles assigned to the subjects. These access control methods are effective in unchangeable distributed system, where there are only a set of Users with a known set of services. For this reason, we propose a framework which is well suited to many situations in cloud computing where users or applications can be clearly separated according to their job functions. In this chapter, we proposes a role based access control framework with various features including security of sensitive data, authorization policy and secure data from hackers. Our proposed role based access control algorithm provides tailored and fine level of user access control services without adding complexity, and supports access privileges updates dynamically when a user's role is added or updated.

Sign in / Sign up

Export Citation Format

Share Document