Fuzzy role-based access control
Martínez García, Carles (Universitat Autònoma de Barcelona. Departament d'Enginyeria de la Informació i de les Comunicacions)
Navarro-Arribas, Guillermo (Universitat Autònoma de Barcelona. Departament d'Enginyeria de la Informació i de les Comunicacions)
Borrell i Viader, Joan (Universitat Autònoma de Barcelona. Departament d'Enginyeria de la Informació i de les Comunicacions)

Date:	2011
Abstract:	RBAC (Role-Based Access Control) is a widely used access control model, which reduces the maintenance cost of classical identity-based access control. However, despite the benefits of RBAC, there are environments in which RBAC can hardly be applied. We present FRBAC (Fuzzy Role-Based Access Control), a generalization of RBAC through fuzzy relations that extends the applicability of RBAC to environments where authorization-related information is vague. Moreover, FRBAC deals with environments where the actions that can be executed over the resources have a fractional meaning, as data lying in databases and risk-based access control.
Grants:	Ministerio de Ciencia e Innovación TIN2010-155764 Ministerio de Ciencia e Innovación TSI2007-65406-C03-02 Ministerio de Ciencia e Innovación CSD2007-00004
Rights:	Tots els drets reservats.
Language:	Anglès
Document:	Article ; recerca ; Versió acceptada per publicar
Subject:	Safety/security in digital systems ; Databases ; Role-Based Access Control ; Uncertainty
Published in:	Information processing letters, Vol. 111, issue 10 (April 2011) , p. 483-487, ISSN 0020-0190

DOI: 10.1016/j.ipl.2011.02.010

Post-print 5 p, 1.6 MB

The record appears in these collections:
Research literature > UAB research groups literature > Research Centres and Groups (research output) > Engineering > Security of Networks and Distributed Applications (SENDA)
Articles > Research articles
Articles > Published articles