scholarly journals Beyond Administration: A Modeling Scheme Supporting the Dynamic Analysis of Role-based Access Control Policies

2020 ◽  
Author(s):  
Marius Schlegel ◽  
Peter Amthor
Keyword(s):  
Access Control ◽  
Dynamic Analysis ◽  
Role Based Access Control ◽  
Control Policies ◽  
Access Control Policies ◽  
Role Based

Secure Publishing using Schema-level Role-based Access Control Policies for Fragments of XML Documents

2009 ◽  
Author(s):  
Tomasz Müldner ◽  
Robin McNeill ◽  
Jan Krzysztof Miziołek
Keyword(s):  
Access Control ◽  
Fixed Number ◽  
Original Structure ◽  
Role Based Access Control ◽  
Control Policies ◽  
Xml Documents ◽  
Access Control Policies ◽  
Minimum Number ◽  
Role Based ◽  
Implementation Tool

Popularity of social networks is growing rapidly and secure publishing is an important implementation tool for these networks. At the same time, recent implementations of access control policies (ACPs) for sharing fragments of XML documents have moved from distributing to users numerous sanitized sub-documents to disseminating a single document multi-encrypted with multiple cryptographic keys, in such a way that the stated ACPs are enforced. Any application that uses this implementation of ACPs will incur a high cost of generating keys separately for each document. However, most such applications, such as secure publishing, use similar documents, i.e. documents based on a selected schema. This paper describes RBAC defined at the schema level, (SRBAC), and generation of the minimum number of keys at the schema level. The main advantage of our approach is that for any application that uses a fixed number of schemas, keys can be generated (or even pre-generated) only once, and then reused in all documents valid for the given schema. While in general, key generation at the schema level has to be pessimistic, our approach tries to minimize the number of generated keys. Incoming XML documents are efficiently encrypted using single-pass SAX parsing in such a way that the original structure of these documents is completely hidden. We also describe distributing to each user only keys needed for decrypting accessible nodes, and for applying the minimal number of encryption operations to an XML document required to satisfy the protection requirements of the policy.

Parameterized Role-Based Access Control Policies for XML Documents

2009 ◽  
Vol 18 (6) ◽  
pp. 282-296 ◽  
Author(s):  
Tomasz Müldner ◽  
Gregory Leighton ◽  
Jan Krzysztof Miziołek
Keyword(s):  
Access Control ◽  
Role Based Access Control ◽  
Control Policies ◽  
Xml Documents ◽  
Access Control Policies ◽  
Role Based
Sign in / Sign up

Export Citation Format

Share Document