Wang, Hua and Cao, Jinli (2008) Delegating revocations and authorizations. In: BPM 2007: 5th International Conference on Business Process Management, 24-28 Sep 2007, Brisbane, Australia.
Delegation models based on role-based access control (RBAC) management have been known as flexible and efficient access management for data sharing on distributed environment. Delegation revocations are a significant functionality for the models in distributed environment when the delegated roles or permissions are required to get back. However, problems may arise in the revocation process when one user delegates user 'U' a role and another user delegates 'U' a negative authorization of the role. This paper aims to analyse various role-based delegation revocation features through examples. Revocations are categorized in four dimensions: Dependency, Resilience, Propagation and Dominance. According the dimensions, sixteen types of revocations exist for specific requests in access management: DependentWeakLocalDelete, DependentWeakLocalNegative, DependentWeakGlobalDelete, DependentWeakGlobalNegative, IndependentWeakLocalDelete, IndependentWeakLocalNegative, IndependentWeakGlobalDelete, IndependentWeakGlobalNegative, and so on. We present revocation delegating models, and then discuss user delegation authorization and the impact of revocation operations. Finally, comparisons with other related work are indicated.
|Item Type:||Conference or Workshop Item (Commonwealth Reporting Category E) (Paper)|
|Additional Information:||Deposited according to the copyright policy of the publisher. This is the authors' version of the work. It is posted here with permission of the publisher for your personal use. No further distribution is permitted.|
|Uncontrolled Keywords:||delegation models; delegation revocations; authorization; RBAC|
|Subjects:||280000 Information, Computing and Communication Sciences|
|Depositing User:||Dr Hua Wang|
|Date Deposited:||19 Feb 2008 02:37|
|Last Modified:||02 Jul 2013 22:58|
Actions (login required)
|Archive Repository Staff Only|