Parameterized Role-Based Access Control Policies for XML Documents

Müldner, Tomasz; Leighton, Gregory; Miziołek, Jan Krzysztof

doi:10.1080/19393550903249612

Cited by 6 publications

(3 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…MAC features make it suitable for high security systems, but the lack of flexibility. In recent years hotspot of access control technology research focused on role-based access control (RBAC) which is proposed by Ferraiolo and Kuhn [5] and task-based access controls (TBAC) which is proposed by Kuhn [6]- [8], but there are also some other related research, such as dynamic role-based access control model [9], a suitable administrative model that governs changes to temporal policies [10], parameterized role-based access control [11], a framework using Budget-Aware Role Based Access Control (BARBAC) [12], adding time features [13] [14] or joining the task access control [15] [16] and so on.…”

Section: Background and Related Workmentioning

confidence: 99%

Role of Time-Domain Based Access Control Model

Liu¹,

Peng²,

Wu³

2016

JSEA

View full text Add to dashboard Cite

While Role-Based Access Control Model (RBAC) is being analyzed, the concept of Role of Timedomain Based Access Control Model (T-RBAC) is put forward. With time-domain added, both timedomain and authority control roles. The basic idea of T-RBAC is introduced and described formally, and the safely of this model is analyzed. The research shows that T-RBAC fulfills both rules of information security, which are principle of least privilege and separation of duties. With practical application of T-RBCA, it can handle most of the time-related or authority-related problems. What's more, it also increases the security level, flexibility and dynamic adaptation of the system and has lower complexity than system only handled by authority. This model also can solve conflicts caused by authority.

show abstract

Section: Background and Related Workmentioning

confidence: 99%

Role of Time-Domain Based Access Control Model

Liu¹,

Peng²,

Wu³

2016

JSEA

View full text Add to dashboard Cite

show abstract

“…The work of (Müldner et al, 2009) presents an approach of supporting RBAC to handle the special case of role proliferation, which is an administrative issue that happens in RBAC when roles are changed, added, and evolve over time, making security of an organization difficult to manage. This approach supports the encryption of segments of the XML document.…”

Section: Related Workmentioning

confidence: 99%

Defining and Enforcing XACML Role-based Security Policies within an XML Security Framework

Algarín

Ziminski

Demurjian

et al. 2013

Proceedings of the 9th International Conference on Web Information Systems and Technologies

View full text Add to dashboard Cite

Securing electronic data has evolved into an important requirement in domains such as health care informatics, with the eXtensible Markup Language (XML) utilized to create standards such as the Clinical Document Architecture and the Continuity of Care Record, which have led to a need for approaches to secure XML schemas and documents. In this paper, we present a method for generating eXtensible Access Control Markup Language (XACML) policies that target XML schemas and their instances, allowing instances to be customized for users depending on their roles. To do so, we extend the Unified Modeling Language (UML) with two new diagrams to model XML: the XML Schema Class Diagram (XSCD) to define the structure of an XML document in UML style; and the XML Role-Slice Diagram (XRSD) to define roles and associated privileges at a granular access control level. In the process, we separate the XML schemas of an application from its security definition in XRSD. To demonstrate the enforcement of our approach, we utilize a personal health assistant mobile application for health information management, which allows patients to share personal health data with providers utilizing XACML for security definition.

show abstract

“…Role-based access plays a significant part in tracking user activity (Qiu, Fuh, and Wong 2006;Müldner, Leighton, and Miziołek 2009;Masood et al 2009;Bouna, Chbeir, and Marrara 2009). Further investigation has indicated that PDM helps design engineers to manage product data and the product development process, and enterprise resource planning (ERP) is important in managing orders, production and inventory processes.…”

Section: Introductionmentioning

confidence: 98%

Enhancement of product information collaboration and access in the aerospace industry

Shehab

Fowler

Gil

et al. 2013

International Journal of Production Research

View full text Add to dashboard Cite

This paper presents the development of four scenarios to design a pull mode industrial solution that enables tier-one suppliers to securely and efficiently retrieve data for manufacturing purposes from original equipment manufacturers (OEMs). The research aims to facilitate and enhance product information sharing between OEMs and their tier one suppliers. The proposed scenarios were developed using PDMLink, which is a product lifecycle management system (PLM) and Microsoft SharePoint collaboration platform. The research methodology comprises six phases including definition of scope, understanding the AS-IS processes, gap analysis, development of the scenarios and finally validation and cost analysis. This methodology was implemented to select the most suitable scenario for utilising the tools available in the PLM system to accomplish the pull mode data collaboration solution. The data for this research was collected in a number of ways including semi-structured interviews, workshops with experts and reviews of technical documentation on current processes.The major benefits of the developed solution are: cost reduction due to diminution of resources required for the new process; lead time to access data by suppliers; and improved data management. These will reduce the product development cycle and ensure improved quality of manufactured components.

show abstract

Parameterized Role-Based Access Control Policies for XML Documents

Cited by 6 publications

References 8 publications

Role of Time-Domain Based Access Control Model

Role of Time-Domain Based Access Control Model

Defining and Enforcing XACML Role-based Security Policies within an XML Security Framework

Enhancement of product information collaboration and access in the aerospace industry

Contact Info

Product

Resources

About