A unified framework for enforcing multiple access control policies

1997 ◽  
Vol 26 (2) ◽  
pp. 474-485 ◽  
Author(s):  
Sushil Jajodia ◽  
Pierangela Samarati ◽  
V. S. Subrahmanian ◽  
Eliza Bertino
Keyword(s):  
Access Control ◽  
Multiple Access ◽  
Unified Framework ◽  
Multiple Access Control ◽  
Control Policies ◽  
Access Control Policies

A Flexible Authorization Framework

2004 ◽  
pp. 149-176
Author(s):  
Duminda Wijesekera ◽  
Sushil Jajodia
Keyword(s):  
Access Control ◽  
Multiple Access ◽  
Rule Base ◽  
Multiple Access Control ◽  
Control Policies ◽  
Workflow Systems ◽  
Access Control Policies ◽  
New Challenges

Advances in application areas such as Internet-based transactions, cooperating coalitions, and workflow systems have brought new challenges to access control. In order to meet the diverse needs of emerging applications, it has become necessary to support multiple access control policies in one security domain. This chapter describes an authorization framework, referred to as the Flexible Authorization Framework (FAF), which is capable of doing so. FAF is a logic-based framework in which authorizations are specified in terms of a locally stratified rule base. FAF allows permissions and prohibitions to be included in its specification. FAF specifications can be changed by deleting and inserting its rules. We also describe FAF’s latest additions, such as revoking granted permissions, provisional authorizations, and obligations.

A Flexible Authorization Framework

2008 ◽  
pp. 1236-1256
Author(s):  
Duminda Wijesekera ◽  
Sushil Jajodia
Keyword(s):  
Access Control ◽  
Multiple Access ◽  
Rule Base ◽  
Multiple Access Control ◽  
Control Policies ◽  
Workflow Systems ◽  
Access Control Policies ◽  
New Challenges

Advances in application areas such as Internet-based transactions, cooperating coalitions, and workflow systems have brought new challenges to access control. In order to meet the diverse needs of emerging applications, it has become necessary to support multiple access control policies in one security domain. This chapter describes an authorization framework, referred to as the Flexible Authorization Framework (FAF), which is capable of doing so. FAF is a logic-based framework in which authorizations are specified in terms of a locally stratified rule base. FAF allows permissions and prohibitions to be included in its specification. FAF specifications can be changed by deleting and inserting its rules. We also describe FAF’s latest additions, such as revoking granted permissions, provisional authorizations, and obligations.

Flexible support for multiple access control policies

2001 ◽  
Vol 26 (2) ◽  
pp. 214-260 ◽  
Author(s):  
Sushil Jajodia ◽  
Pierangela Samarati ◽  
Maria Luisa Sapino ◽  
V. S. Subrahmanian
Keyword(s):  
Access Control ◽  
Multiple Access ◽  
Multiple Access Control ◽  
Control Policies ◽  
Flexible Support ◽  
Access Control Policies
Sign in / Sign up

Export Citation Format

Share Document