A temporal-logic extension of role-based access control covering dynamic separation of duties

10th International Symposium on Temporal Representation and Reasoning and Fourth International Conference on Temporal Logic p. 83
A temporal-logic extension of role-based access control covering dynamic separation of duties
Till Mossakowski, University of Bremen
Michael Drouineaud, University of Bremen
Karsten Sohr, University of Bremen

Full Article Text:

DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/TIME.2003.1214883
Send link to a friend

Abstract
Security policies play an important role in today’s computer systems. We show some severe limitations of the wide-spread standard role-based access control (RBAC) model, namely that object-based dynamic separation of duty as introduced by Nash and Poland cannot be expressed with it. We suggest to overcome these limitations by extending the RBAC model with an execution history. The natural next step is then to add temporal logic for the specification of execution orders. We show that with this, object-based dynamic separation of duty, as well as other policies, can be adequately specified.
Back to Top Additional Information
Citation: Till Mossakowski, Michael Drouineaud, Karsten Sohr, "A temporal-logic extension of role-based access control covering dynamic separation of duties," time-ictl, p. 83, 10th International Symposium on Temporal Representation and Reasoning and Fourth International Conference on Temporal Logic, 2003

	Advanced Search
CS Search Google Search