Resource and Role Hierarchy Based Access Control for Resourceful Systems

Solanki，Nidhiben1; Huang，Yongtao1; Yen，I. Ling1; Bastani，Farokh1; Zhang，Yuqun2

10.1109/COMPSAC.2018.10280

2018-06-08

0730-3157

Proceedings - International Computer Software and Applications Conference

2

480-486

Tokyo, Japan

IEEE Computer Society

Role based access control (RBAC) has been used extensively in practice since it naturally capturing the structure of the users in an organization. It is especially useful in multi-tenant cloud platforms. However, with the growing amount of data and growing number of devices, assigning permissions for these resources (such as data and devices) to roles become challenging. We develop a resource hierarchy based permission model and integrate it with RBAC to create the RRBAC (resource and role based access control) model to simplify the permission assignment in RBAC. However, realizing RRBAC requires careful design to ensure efficient permission assignment, validation, and revocation. Instead of using policy based solutions, such as XACML, we design a resource tree based approach to achieve high performance for various permission related operations. Preliminary experiments show that RRBAC approach can achieve more efficient permission assignment and validation.

Attribute based access control Cloud Security Permission assignment Permission validation Resource hierarchy Role based access control

其他

英语

EI

[IIP-1128270]

20184406008913

Application programs

Computer Software, Data Handling and Applications:723

2-s2.0-85052318765

Scopus

1.University of Texas at Dallas, ,United States
2.Southern University of Science and Technology, ,China

Solanki，Nidhiben,Huang，Yongtao,Yen，I. Ling,et al. Resource and Role Hierarchy Based Access Control for Resourceful Systems[C]:IEEE Computer Society,2018:480-486.