Role Based Access Control (RBAC) is a methodology for providing users in an IT system specific permissions like write or read to users. It abstracts from specific users and binds permissions to user roles. Similarly, one can abstract from specific documents and bind permission to document types. In this paper, we apply Description Logics (DLs) to formalize RBAC. We provide a thorough discussion...

ion des données : on peut définir des actions plus abstraites que lecture/écriture. Le modèle RBAC modélise le système informatique considéré en séparant les entités actives des entités passives. Les entités actives correspondent aux utilisateurs du système et les entités passives correspondent aux objets du système. Au contraire du modèle de LaPadula, qui associe des niveaux de sécurité aux di...

Role-Based Access Control (RBAC) has proven as a cost effective as well as a practical solution for authorization management in large enterprises. In the recent past, RBAC has been widely explored and there have been several extensions to it. Current systems do not enforce standard RBAC features and its extensions in a seamless way, which is essential to make RBAC even better-suited for a wide ...

Besides the well established access control models, Discretionary Access Control (DAC) and Mandatory Access Control (MAC), the policy neutral Role Based Access Control (RBAC) is gaining increasing attention. An important step towards a wide acceptance of RBAC has been achieved by the standardization of RBAC through the American National Standards Institute (ANSI). While the mandatory concept of...

Role-based access control (RBAC) models have generated a great interest in the security community as a powerful and generalized approach to security management and ability to model organizational structure and their capability to reduce administrative expenses. In this paper, we highlight the drawbacks of latest developed RBAC models in terms of access control and authorization and later provid...

Cloud data storage lets customers store vast amounts of cheaply on demand. Cryptographic role-based access control (RBAC) systems preserve cloud privacy by restricting to users. This study develops a trust model reason about and improve security in cryptographic RBAC systems. The degrees the user determine rights are performed User Activity Monitoring Agent (UAMA). Two different misconducts use...

In role-based access control (RBAC) permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles' permissions. The principal motivation behind RBAC is to simplify administration. An appealing possibility is to use RBAC itself to manage RBAC, to further provide administrative convenience. In this paper we introduce a role-based administrative...

This paper describes a simplified and corrected specification of role-based access control (RBAC) based on the specification in the ANSI standard for RBAC. The simplifications and corrections were made while following a systematic method for deriving efficient implementations from straightforward implementations of clear specifications. The method allows specifications to be written clearly wit...

Role-based access control (RBAC) is a flexible approach to access control, which has generated great interest in the security community. The principal motivation behind RBAC is to simplify the complexity of administrative tasks. Several formal models of RBAC have been introduced. However, there are a few works specifying RBAC in a way which system developers or software engineers can easily und...

Information service platforms or management information systems of various institutions sectors enterprises are gradually interconnected to form a multi-domain environment. A environment is convenient for managers supervise and manage systems, users access data across domains systems. However, given the complex many users, traditional enhanced role-based control (RBAC) model still faces some ch...