International Conference on Internet Computing · 2000 · 64 citations · 0 references
ComputingComputer ScienceComputer SystemsAccess ManagementComputer SecuritySecurity PolicyAccess ControlAuthorizationPolicy-based Access ControlSecurity AdministrationSecurity ControlsSecurity ManagementCross-domain AuthorizationPartial OrderingRole HierarchiesRole Hierarchy ManagementRole-based AuthorizationSecure Interoperability
The secure interaction between two or more administrative domains is a major concern. We examine the issues of secure interoperability between two security domains operating under the Role Based Access Control (RBAC) Model. We propose a model that quickly establishes a flexible policy for dynamic role translation. The role hierarchies of the local and foreign domains can be manipulated through our Role Editor which is used to set up associations between these hierarchies. These associations result in a combined partial ordering of the role hierarchies, which can be used to make meaningful access control decisions for secure interoperability.