Earticle

초록

영어

In an open and distributed network, role-based access control (RBAC) model has the following deficiencies: Firstly, it is unable to provide flexible access control policy, and the granularity of authorization is too large. Secondly, the allocation and management of roles are too cumbersome, which leads to low efficiency of access control. To deal with these problems, we present a hybrid attribute based RBAC (HA-RBAC) model. In this paper, we deeply research the mapping relationships of roles and attributes, propose a combination of static-attribute-based roles and dynamic-attribute-based rules to simplify the management of access control policy and downsize the access control system, while we formally define the construction of HA-RBAC model and access control algorithm. Comparative analysis and simulation experiments show that this model can not only adapt to the role of fine-grained division and simplify policy management, but also improve the efficiency of access control, and reduce system consumption.

목차

Abstract
 1. Introduction
 2. Related Work
 3. Definitions and Properties
 4. The HA-RBAC Model
  4.1. Model Structure
  4.2. Formal Definition of the Model
  4.3. Model Access Control Algorithm
 5. HA-RBAC Model Analysis
  5.1. Comparative Analysis
  5.2. Performance Analysis
 6. Conclusions
 Acknowledgements
 References

키워드

저자

• Ting Cai [ College of Mobile Telecommunications, Chongqing University of Posts and Telecommunications, Chongqing, China ] Corresponding Author
• Jian Zheng [ School of Computer and Information, Chongqing Normal University, Chongqing, China ]
• Xing Du [ School of Computer and Information, Chongqing Normal University, Chongqing, China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605