A Framework for Role-based group delegation in distributed environment

Wang, H., Addie, R., Li, J., Dekeyser, S. and Watson, R.

Role-based delegation model (RBDM) based on the role-based access control (RBAC) has proven to be a flexible and useful access control model for information sharing in a distributed collaborative environment. In today's highly dynamic distributed systems a user often needs to delegate a role to all members of a group at the same time. It presents the challenge of how to build a role-based group delegation framework within RBAC in distributed environment. This paper aims to build a group delegation framework within RBAC. The framework includes a rolebased group delegation granting model, group delegation revocation model, granting authorization and revocation authorization. We analyse various revocations and the impact of revocations on role hierarchies. The implementation with XML based tools demonstrates the framework and authorization methods. Finally Comparisons with other related work are indicated.

Cite as: Wang, H., Addie, R., Li, J., Dekeyser, S. and Watson, R. (2006). A Framework for Role-based group delegation in distributed environment. In Proc. Twenty-Ninth Australasian Computer Science Conference (ACSC 2006), Hobart, Australia. CRPIT, 48. Estivill-Castro, V. and Dobbie, G., Eds. ACS. 321-328.

(from crpit.com) (local if available)