A formal framework to elicit roles with business meaning in RBAC systems

The role-based access control (RBAC) model has proven to be cost effective to reduce the complexity and costs of access permission management. To maximize the advantages offered by RBAC, the role engineering discipline has been introduced. A viable approach is to explore current applications and systems to find de facto roles embedded in existing user permissions, leading to what is usually referred to as role mining. However, a key problem that has not yet been adequately addressed by existing role mining approaches is how to propose roles that have business meaning. In order to do this, we provide a new formal framework that also enjoys practical relevance. In particular, the proposed framework leverages business information—such as business processes and organization structure—to implement role mining algorithms. Our key observation is that a role is likely to be meaningful from a business perspective when it involves activities within the same business process or organizati...

• Type: Conference
• Year: 2009
• Where: SACMAT
• Authors: Alessandro Colantonio, Roberto Di Pietro, Alberto Ocello, Nino Vincenzo Verde
• Keywords: Control Systems, Role Engineering, Role Mining, Role-based Access Control, SACMAT 2009