A Constraint and Attribute Based Security Framework for Dynamic Role Assignment in Collaborative Environments

Abstract. We investigate a security framework for collaborative applications that relies on the role-based access control (RBAC) model. In our framework, roles are pre-defined and organized in a hierarchy (partial order). However, we assume that users are not previously identified, therefore the actions that they can perform are dynamically determined based on their own attribute values and on the attribute values associated with the resources. Those values can vary over time (e.g., the user’s location or whether the resource is open for visiting) thus enabling or disabling a user’s ability to perform an action on a particular resource. In our framework, constraint values form partial orders and determine the association of actions with the resources and of users with roles. We have implemented our framework by exploring the capabilities of se

• Type: Conference
• Year: 2008
• Where: COLCOM
• Authors: Isabel F. Cruz, Rigel Gjomemo, Benjamin Lin, Mirko Orsini
• Keywords: Applied Computing, Attribute Values, COLCOM 2008, Partial Orders, Role-based Access Control