A Verifiable Modeling Approach to Configurable Role-Based Access Control

Role-based access control (RBAC) is a popular access control model for enterprise systems due to its economic benefit and scalability. There are many RBAC features available, each providing a different feature. Not all features are needed for an RBAC system. Depending on the requirements, one should be able to configure RBAC by selecting only those features that are needed for the requirements. However, there have not been suitable methods that enable RBAC configuration at the feature level. This paper proposes an approach for systematic RBAC configuration using a combination of feature modeling and UML modeling. The approach describes feature modeling and design principles for specifying and verifying RBAC features and a composition method for building configured RBAC. We demonstrate the approach by building an RBAC configuration for a bank application.

• Type: Journal
• Year: 2010
• Where: FASE
• Authors: Dae-Kyoo Kim, Lunjin Lu, Sangsig Kim
• Keywords: FASE 2010, RBAC, RBAC Configuration, Software Engineering, Systematic Rbac Configuration