An XML‐based administration method on role‐based access control in the enterprise environment

Abstract

Proposes an object‐oriented role‐based access control (ORBAC) model to efficiently represent the real world. Though ORBAC is a good model, administration of ORBAC, including creating and maintaining an access control security policy, still remains a challenging problem. Presents a practical method that can be employed in an enterprise environment to manage security policies using eXtensible Markup Language (XML). Based on ORBAC security policy expressed in XML, a role assignment algorithm is presented. The computation complexity of the algorithms is O(N) where n is the number of position roles in a user’s assigned position role scope.

Citation

Yang, C. and Zhang, C.N. (2003), "An XML‐based administration method on role‐based access control in the enterprise environment", Information Management & Computer Security, Vol. 11 No. 5, pp. 249-257. https://doi.org/10.1108/09685220310500162