Busch, Sönke and Muschall, Björn and Pernul, Günther and Priebe, Torsten (2006) Authrule: A Generic Rule-Based Authorization Module. In: Data and Applications Security XX: proceedings / 20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security, Sophia Antipolis, France, July 31 - August 2, 2006. Lecture Notes in Computer Science, 4127. Springer, Berlin, pp. 267-281. ISBN 978-3-540-36799-4; 978-3-540-36796-3.
Download (421kB) - Repository staff only
As part of the access control process an authorization decision needs to be taken based on a certain authorization model. Depending on the environment different models are applicable (e.g., RBAC in organizations, MAC in the military field). An authorization model contains all necessary elements needed for the decision (e.g., subjects, objects, and roles) as well as their relations. As these elements are usually inherent in the software architecture of an access control module, such modules limit themselves to the use of a certain specific authorization model. A later change of the model consequently results in a substantial effort for revising the software architecture of the given module. Rule-based systems are well suited to represent authorization models by mapping them to facts and rules, which can be modified in a flexible manner. In this paper
we present a generic authorization module, which can take authorization decisions on the basis of arbitrary models utilizing rule-based technology.
The implementation of the popular RBAC and ABAC (attribute-based access control) models is demonstrated.
|Item Type:||Book Section|
|Institutions:||Business, Economics and Information Systems > Institut für Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul)|
|Subjects:||300 Social sciences > 330 Economics|
|Refereed:||Yes, this version has been refereed|
|Created at the University of Regensburg:||Yes|
|Deposited On:||24 Oct 2006|
|Last Modified:||20 Jul 2011 20:49|