ACM Workshop on Role-Based Access Control最新文献

A model of accountability, confidentiality and override for healthcare and other applications 医疗保健和其他应用程序的问责制、保密性和覆盖模型

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344304

J. Longstaff, M. Lockyer, M. Thick

{"title":"A model of accountability, confidentiality and override for healthcare and other applications","authors":"J. Longstaff, M. Lockyer, M. Thick","doi":"10.1145/344287.344304","DOIUrl":"https://doi.org/10.1145/344287.344304","url":null,"abstract":"A UML model of Authorisation is described, which was developed for an Electronic Medical Records application in collaboration with the UK NHS Information Authority. The model is an enhancement of the UK Healthcare Model (HcM), in that it provides extra classes for use with HcM classes. It provides powerful confidentiality specification capabilities, which can also be used in other applications.\u0000A Role (actually called AgentActivityType for consistency with the HcM) may be directly associated with an Accountability. An Accountability is an agreement where one Party commissions a second Party to undertake Activities under the authority of that Accountability.\u0000Four types of Confidentiality Permission are defined which allow access to data items (SubjectPhenomena), or to data items with specific types (SubjectPhenomenonType). Access can be granted to individual Agents, or to AuthorizedAgents acting in specified Roles. A model of override allows the Confidentiality Permissions to be overridden in a strictly controlled way. Override facilities are granted to Agents by establishing appropriate Accountabilities, and any use of override is logged.\u0000Access to data can be granted to groups of Agents, and to group of Roles. Establishing access rights for a group involves defining a set of Confidentiality Permissions for the group.\u0000The Authorisation Model is illustrated throughout the paper by examples from healthcare. In particular a demanding scenario (child abuse) is presented. In this scenario complex restrictions must be placed on the data, which might result in inappropriate actions if clinicians and other professionals are denied access to the data.","PeriodicalId":355233,"journal":{"name":"ACM Workshop on Role-Based Access Control","volume":"78 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2000-07-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128292806","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 29

Injecting RBAC to secure a Web-based workflow system 注入RBAC以保护基于web的工作流系统

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344295

Gail-Joon Ahn, R. Sandhu, Myong H. Kang, Joon S. Park

{"title":"Injecting RBAC to secure a Web-based workflow system","authors":"Gail-Joon Ahn, R. Sandhu, Myong H. Kang, Joon S. Park","doi":"10.1145/344287.344295","DOIUrl":"https://doi.org/10.1145/344287.344295","url":null,"abstract":"Web-based workflow systems have recently received much attention because they can support dynamic business processes over heterogeneous computing systems. Most existing web-based workflow systems, however, provide minimal security services such as authentication of users and network security. In this paper we describes an experiment in injecting role-based access control (RBAC) into an existing web-based workflow system. Specifically, we ensure that each task can only be executed by users belonging to a specific role. In order to achieve this, we define a simplified RBAC model to meet our needs and describe the security architecture to be applied to an existing web-based workflow system. We describe our implementation using commercial off-the-shelf (COTS) technology to demonstrate the feasibility of this approach. Our implementation uses X.509v3 certificates with role attribute, and employs a user-pull style where the client requests a client certificate from the role-server and presents it to the workflow system. A major goal of our implementation is to have minimal changes to the existing web server and no changes to the browser. We also discuss alternative architecture such as server-pull with LDAP (Lightweight Directory Access Protocol).","PeriodicalId":355233,"journal":{"name":"ACM Workshop on Role-Based Access Control","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2000-07-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122239851","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 112

The NIST model for role-based access control: towards a unified standard NIST基于角色的访问控制模型:走向统一标准

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344301

R. Sandhu, David F. Ferraiolo, R. Kuhn

{"title":"The NIST model for role-based access control: towards a unified standard","authors":"R. Sandhu, David F. Ferraiolo, R. Kuhn","doi":"10.1145/344287.344301","DOIUrl":"https://doi.org/10.1145/344287.344301","url":null,"abstract":"This paper describes a unified model for role-based access control (RBAC). RBAC is a proven technology for large-scale authorization. However, lack of a standard model results in uncertainty and confusion about its utility and meaning. The NIST model seeks to resolve this situation by unifying ideas from prior RBAC models, commercial products and research prototypes. It is intended to serve as a foundation for developing future standards. RBAC is a rich and open-ended technology which is evolving as users, researchers and vendors gain experience with it. The NIST model focuses on those aspects of RBAC for which consensus is available. It is organized into four levels of increasing functional capabilities called flat RBAC, hierarchical RBAC, constrained RBAC and symmetric RBAC. These levels are cumulative and each adds exactly one new requirement. An alternate approach comprising flat and hierarchical RBAC in an ordered sequence and two unordered features—constraints and symmetry—is also presented. The paper furthermore identifies important attributes of RBAC not included in the NIST model. Some are not suitable for inclusion in a consensus document. Others require further work and agreement before standardization is feasible.","PeriodicalId":355233,"journal":{"name":"ACM Workshop on Role-Based Access Control","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2000-07-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123710332","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1033

Integrated constraints and inheritance in DTAC DTAC中的集成约束和继承

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344307

Jonathon Tidswell, T. Jaeger

引用次数: 25

Role delegation in role-based access control 基于角色的访问控制中的角色委派

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344300

S. Na, Suh-Hyun Cheon

引用次数: 83

Modeling users in role-based access control 在基于角色的访问控制中对用户建模

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344299

Sylvia L. Osborn, Yuxia Guo

引用次数: 63

Role-finding/role-engineering (panel session) 角色寻找/角色工程(小组会议)

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344303

Haio Roeckle

引用次数: 8

Engineering authority and trust in cyberspace: the OM-AM and RBAC way 网络空间中的工程权威和信任:OM-AM和RBAC方式

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344309

R. Sandhu

引用次数: 77

Enabling technologies for role based online decision engines 基于角色的在线决策引擎的启用技术

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344305

T. Gebhardt, T. Hildmann

引用次数: 3

Rebuttal to the NIST RBAC model proposal 对NIST RBAC模型提案的反驳

ACM Workshop on Role-Based Access Control Pub Date : 2000-07-26 DOI: 10.1145/344287.344302

T. Jaeger, Jonathon Tidswell

引用次数: 24