A flexible authorization mechanism for virtual organizations

Baltatzis, Dimitrios; Georgiadis, Christos K.; Pangalos, George

doi:10.1109/ccst.2005.1594853

Cited by 4 publications

(2 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The process that decomposes a security role follows this order: each other with some level of seniority A_Fs are filled with A_Vs [9] [10]. The structure for every role throughout the collaboration is the same.…”

Section: Figure 2 Role Decompositionmentioning

confidence: 99%

Mobile Agents in E-commerce Environments: Supporting Collaborative Activities

Baltatzis

Georgiadis

Pagkalos

International Conference on Computational Intelligence for Modelling, Control and Automation and International Conference on In

Self Cite

View full text Add to dashboard Cite

E-commerce operations are frequently repetitive with a large segment suitable to computer aids and automation. Moreover, managing e-commerce collaborative activities on the Web requires knowing exactly what information to share with whom. Mobile agents become relevant candidates to assist users as it is largely accepted that have the ability to address efficiently some of these problems. However, mobile agent technology carries with it associated security vulnerabilities that had to be addressed in order to be functional. A key requirement is to find a flexible, convenient and effective method to work out the mobile agent authorization problem. We argue that a satisfactory approach for this problem is to dynamically map casual users, like mobile agents, with predefined organizational security roles, based on a flexible role-assignment mechanism.

show abstract

Section: Figure 2 Role Decompositionmentioning

confidence: 99%

Mobile Agents in E-commerce Environments: Supporting Collaborative Activities

Baltatzis

Georgiadis

Pagkalos

International Conference on Computational Intelligence for Modelling, Control and Automation and International Conference on In

Self Cite

View full text Add to dashboard Cite

show abstract

“…It is therefore evident that a re-definition of the role concept is needed [108]. This is particularly important in a CE where exchanging roles is critical and a common role structure would be handy for all participant organizations [109], [110].…”

Section: The Need For Further Defining a Role Structurementioning

confidence: 99%

Dynamic authorizations for secure internet applications

Μπαλτατζής¹

View full text Add to dashboard Cite

Με την ανάπτυξη του ‘Ίντερνετ τα τελευταία χρόνια και την βελτίωση των δικτυακών υποδομών, τα περιβάλλοντα συνεργασίας μεταξύ ομοειδών οργανισμών αποτελούν πλέον κοινή πρακτική. Τέτοια περιβάλλοντα θα μπορούσαν να είναι, τα τριτοβάθμια εκπαιδευτικά ιδρύματα μιας χώρας, οι φορείς υγείας μιας χώρας, οι δημόσιες υπηρεσίες στα πλαίσια της ηλεκτρονικής διακυβέρνησης κλπ. Οι οργανισμοί που παίρνουν μέρος σε τέτοια περιβάλλοντα είναι αυτόνομοι ενώ το ίδιο το περιβάλλον είναι δυναμικό και κλιμακούμενο δηλ. οργανισμοί μπορούν να μπαίνουν και να αποχωρούν από το περιβάλλον συνεργασίας χωρίς αυτό να επηρεάζεται. Οι οργανισμοί αυτοί εξυπηρετούν 2 είδη χρηστών, τους τοπικούς χρήστες και τους εξωτερικούς χρήστες άλλων οργανισμών. Το πρόβλημα της εξουσιοδότησης είναι ιδιαίτερα σημαντικό. Το μοντέλο RBAC, που βασίζεται στους ρόλους είναι το πιο γνωστό μοντέλο ελέγχου προσπέλασης και θεωρούμε ότι όλοι οι συμμετέχοντες οργανισμοί κάνουν χρήση του. Η πρόταση μας βασίζεται στην παραδοχή πως με τον ορισμό μιας κοινής δομής για τους ρόλους, κοινής σε όλους τους συμμετέχοντες οργανισμούς μπορούμε στην συνέχεια να ορίσουμε ένα αλγόριθμο σύγκρισης ο οποίος θα μετατρέπει τον εισερχόμενο ρόλο ενός εξωτερικού χρήστη ενός συνεργαζόμενου οργανισμού, σε ένα ρόλο του τοπικού οργανισμού. Τα πλεονεκτήματα της λύσης αυτής είναι η αυτοματοποίηση της διαδικασίας απόδοσης ρόλου, ο περιορισμός του αριθμού των ρόλων και η εξάλειψη της ανάγκης ύπαρξης συγκεκριμένων προαποφασισμένων κριτηρίων για την απόδοση ενός συγκεκριμένου ρόλου κάθε φορά που γίνεται μια αίτηση πρόσβασης.

show abstract

A Role Engineering Framework to Support Dynamic Authorizations in Collaborative Environments

Baltatzis

Ilioudis

Pangalos

2012

Information Security Journal: A Global Perspective

View full text Add to dashboard Cite

With the increasing availability of networks and the advancements in their underlying infrastructure of mobile devices, access control and authorization issues will be enablers of future technologies in collaborative environments. Recent works demonstrate efforts to dynamically authorize users without prior knowledge and with no security configuration attributes or roles previously assigned to them. Moreover, current role-based engineering approaches construct role hierarchies without reflecting the organizational structure, since they do not take into account structural organizational characteristics. In this paper we propose an innovative role structure, not solely dependent on naming methods but also that takes into account organizational as well as functional characteristics to provide a practical role assignment methodology between organizations in a collaborative environment. More specifically, we argue that beyond the fact that a role represents a job assignment to perform certain function(s), it is also a composite element representing several organizational characteristics such as organizational function, organizational domain and level of authority. The proposed role structure enables role-to-role assignment as external nonlocal users request access in a particular information system (e.g., people on the move, users logged in from a collaborative organization) and acquire local role(s). A clear advantage in the proposed framework is its flexibility in the role assignment process, since the proposed role decomposition does not require an exact match of predefined credentials. The methodology is autonomous, as no prior trust establishment is required between interactive organizations, expendable as new organizations can join the collaboration without affecting the existing ones, flexible as it does not affect the local access control policy, scalable as the collaboration can increase arbitrary and efficient as the comparison methodology guarantees the selection of the appropriate local role, if such one exists.

show abstract

A flexible authorization mechanism for virtual organizations

Cited by 4 publications

References 6 publications

Mobile Agents in E-commerce Environments: Supporting Collaborative Activities

Mobile Agents in E-commerce Environments: Supporting Collaborative Activities

Dynamic authorizations for secure internet applications

A Role Engineering Framework to Support Dynamic Authorizations in Collaborative Environments

Contact Info

Product

Resources

About