doi: 10.4304/jsw.6.6.1096-1102
Dynamic Role-Based Access Control Model
- 1 Key Laboratory of Intelligent Information Technology
- 2 School of Computer Science and Technology，Beijing Institute of Technology ,Beijing, China
Abstract
With the rapid development of network and the coming of information age, access control is particularly important, role-based access control (RBAC) is an access control which is popular. RBAC authorizes and controls the roles corresponding to the users to operate the object. It solves problems of least privilege, separation of duties and so on. However, limited permissions are required to be executed by a certain sequence, that is, the permission owned by a user is controlled by other users’. To solve this problem, this paper proposed an improved model on the base of the original RBAC, not only to retain the original characteristics of RBAC but also solve a specific problem of some permissions which are needed to executed by sequential order, and the analysis shows that this scheme has better security, better flexibility, and can be well applied to the workflow system.
Keywords
- RBAC
- least privilege
- duty separation
How to Cite
Jun Zheng, Qikun Zhang, Shangwen Zheng, and Yuan Tan, "Dynamic Role-Based Access Control Model," Journal of Software, vol. 6, no. 6, pp. 1096-1102, 2011. https://doi.org/ 10.4304/jsw.6.6.1096-1102
Copyright & License
Copyright © 2011 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).