A framework for role-based group delegation in distributed environments

Abstract

Role-based delegation model(RBDM) based on the role-based access model (RBAM) has proven to be a flexible and useful access control model for information sharing in a distributed collaborative environment. In today's highly dynamic distributed systems, a user often needs to delegate a role to all members of a group at the same time. It presents the challenge of how to build a role-based group delegation framework within RBAC in distributed environment. This paper aims to build a group delegation framework within RBAC. The framework includes a role-based group delegation granting model, group delegation revocation model, granting authorization and revocation authorization. We analyse various revocations and the impact of revocations on role heirarchies. The implementation with XML based tools demonstrates the framework and authorization methods. Finally comparisons with other related work are indicated.