Role-based Access Control’ - Ravi Sandhu

Role-based Access control RAVl S. SANDHU2 Laboratory for Information Security Technology Information and Software Engineering Department, MS 4A4 George Mason University Fairfax, VA 22030 USA Abstract The basic concept of Role-based Access control (RBAC) is that permissions are associated with roles , and users are made members of appropriate roles , thereby acquiring the roles permissions. This idea has been around since the advent of multi-user computing. Until recently, however, RBAC has received little attention from the research community. This chapter describes the motivations, results, and open issues in recent MAC research. The chapter focuses on four areas. First, RBAC is a multidimensional concept that can range from very simple at one extreme to quite complex and sophisticated at the other. This presents problems in coming up with a definitive model of RBAC.

ROLE-BASED ACCESS CONTROL 239 controls. Section 5 describes a conceptual three-tier architecture for specifi- cation and enforcement of RBAC. Section 6 concludes the chapter with a brief discussion of open issues in MAC.

Loading..

Tags:

  Based, Control, Roles, Access, Role based access control

Information

Related search queries