Kabir, Md Enamul and Wang, Hua and Bertino, Elisa (2010) A role-involved conditional purpose-based access control model. In: E-Government and E-Services Conference (EGES) at the 2010 IFIP World Computer Conference (WCC 2010), 20-23 Sep 2010, Brisbane, Australia.
PDF (Accepted Version)
This paper presents a role-involved conditional purpose-based access control (RCPBAC) model, where a purpose is defined as the intension of data accesses or usages. RCPBAC allows users using some data for certain purpose with conditions. The structure of RCPBAC model is defined and investigated. An algorithm is developed to achieve the compliance computation between access purposes (related to data access) and intended purposes (related to data objects) and is illustrated with role-based access control (RBAC) to support RCPBAC. According to this model, more information from data providers can be extracted while at the same time assuring privacy that maximizes the usability of consumers’ data. It extends traditional access control models to a further coverage of privacy preserving in data mining environment as RBAC is one of the most popular approach towards access control to achieve database security and available in database management systems. The structure helps enterprises to circulate clear privacy promise, to collect and manage user preferences and consent.
|Item Type:||Conference or Workshop Item (Commonwealth Reporting Category E) (Paper)|
|Additional Information:||Accepted version deposited in accordance with the copyright policy of the publisher.|
|Uncontrolled Keywords:||access control; conditional purpose; privacy|
|Depositing User:||Mr Md Enamul Kabir|
|Date Deposited:||06 Apr 2011 05:08|
|Last Modified:||03 Jul 2013 00:29|
Actions (login required)
|Archive Repository Staff Only|