IEEE Internet Computing · 2004 · 167 citations · 13 references
ComputingCybersecurityAccess ManagementMediationSecurity ArchitectureAccess ControlAccess PolicyAccess RightsAuthorizationPolicy-based Access ControlSecurity ControlsAuthorization PoliciesCross-domain Access ControlCross-domain AuthorizationMediation FrameworksModel Specification LanguagePolicy SpecificationPolicy Specification LanguagesSecurity Policy Specification
The XML role-based access control (X-RBAC) specification language addresses multidomain environments' policy-specification needs. X-RBAC is based on an extension of the widely accepted US National Institute of Standards and Technology role-based access-control (RBAC) model. In addition to allowing specification of RBAC policies and facilitating specification of timing constraints on roles and access requirements, X-RBAC provides a framework for specifying mediation policies in a multidomain environment where RBAC policies have been employed.
13
Proposed NIST standard for role-based access control
David F. Ferraiolo, Ravi Sandhu, Serban I. Gavrila et al. · ACM Transactions on Information and System Security · 2001 · 2.5K citations · Full text
The NIST model for role-based access control
Ravi Sandhu, David Ferraiolo, Richard Kühn · 2000 · 872 citations · Full text
A community authorization service for group collaboration
Laura Pearlman, Von Welch, Ian Foster et al. · 2003 · 665 citations