Authorization Algorithms for Permission-Role Assignments

Lili Sun (University of Southern Queensland, Australia)

Hua Wang (University of Southern Queensland, Australia)

Jianming Yong (University of Southern Queensland, Australia)

Abstract: Permission-role assignments (PRA) is one important process in Role-based access control (RBAC) which has been proven to be a flexible and useful access model for information sharing in distributed collaborative environments. However, problems may arise during the procedures of PRA. Conflicting permissions may assign to one role, and as a result, the role with the permissions can derive unexpected access capabilities.

This paper aims to analyze the problems during the procedures of permission-role assignments in distributed collaborative environments and to develop authorization allocation algorithms to address the problems within permission-role assignments. The algorithms are extended to the case of PRA with the mobility of permission-role relationship. Finally, comparisons with other related work are discussed to demonstrate the effective work of the paper.

Keywords: access control, authorization, conflicts

Categories: H.1.1, H.2.8, I.1.2