기업환경의 접근제어를 위한 확장된 GTRBAC 위임 모델 = Extended GTRBAC Delegation Model for Access Control Enforcement in Enterprise Environments

다국어 초록 (Multilingual Abstract)

With the wide acceptance of the Internet and the Web, volumes of information and related users have increased and companies have become to need security mechanisms to effectively protect important information for business activities and security problems have become increasingly difficult. This paper proposes a improved access control model for access control enforcement in enterprise environments through the integration of the temporal constraint character of the GT-RBAC model, sub-role hierarchies concept and PBDM(Permission Based Delegation Model). The proposed model, called Extended GT-RBAC(Extended Generalized Temporal Role Based Access Control) delegation Model, supports characteristics of GTRBAC model such as of temporal constraint, various time-constrained cardinality, control flow dependency and separation of duty constraints (SoDs). Also it supports conditional inheritance based on the degree of inheritance and business characteristics by using sub-roles hierarchies and supports permission based delegation, user to user delegation, role to role delegation, multi-step delegation and temporal delegation by using PBDM.

참고문헌 (Reference)

1 황유동, "기업환경의 접근제어를 위한 확장된 GTRBAC 모델" 8 (8): 2005

2 J. B. D. Joshi, "Temporal Role Hierarchies in GTRBAC" CERIAS 2002

3 J. B. D. Joshi, "Temporal Hierarchies and Inheritance Semantics for GTRBAC" 74-83, 2002

4 R.K.Thomas, "Task-based Authorization Controls(TBAC) : A Family of Models for Active and Enterprise-oriented Authorization Management" 1997

5 S. Oh, "Task-Role Based Access Control (T-RBAC): An Improved Access Control Model for Enterprise Environment" 264-273, 2000

6 E. Bertino, "TRBAC: A Temporal Role-based Access Control Model" 21-30, 2000

7 C.P.Pfleeger, "Security in Computing, second edition" Prentice-Hall International Inc 1997

8 R.S.Sandhu, "Role-Based Access control Method" 29 : 1996

9 D.Ferraiom, "Role- based Access Control(RBAC) : Features and motivations" 1995

10 Xinwen Zhang, "PBDM : A Flexible Delegation Model in RBAC" 2003

11 J. B. D. Joshi, "Hybrid Role Hierarchy for Generalized Temporal Role Based Access Control Model" Proceedings of the 26 th Annual International Computer Software and Applications Conference 2002

12 YongHoon Yi, "Applying RBAC Providing Restricted Permission Inheritance to a Corporate Web Environment" 2003

13 Dagstull, "A Security Model for Cooperative work : a model and its system implications" 1994

14 HyungHyo Lee, "A New Role-Based Delegation Model Using Sub-Role Hierarchies" 2003