Role-Based Access Control Model for Inter-System Cross-Domain in Multi-Domain Environment
Source abstract
Abstract
Information service platforms or management information systems of various institutions or sectors of enterprises are gradually interconnected to form a multi-domain environment. A multi-domain environment is convenient for managers to supervise and manage systems, and for users to access data across domains and systems. However, given the complex multi-domain environment and many users, the traditional or enhanced role-based access control (RBAC) model still faces some challenges. It is necessary to address issues such as role naming conflicts, platform–domain management conflicts, inter-domain management conflicts, and cross-domain sharing difficulties. For the above problems, a role-based access control model for inter-system cross-domain in multi-domain environment (RBAC-IC) is proposed. This paper formally defines the model, divides roles into abstract roles and specific roles, and designs the operating process of the access control model. The model has four characteristics: support role name repetition, platform–domain isolation management, inter-domain isolation management, and fine-grained cross-domain sharing. By establishing security violation formulas for security analysis, it is finally shown that RBAC-IC can operate safely.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Access Control and Trust · Cloud Data Security Solutions · Security and Verification in Computing
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
School of Armament Science and Technology, Xi’an Technological University, Xi’an 710021, China
School of Computer Science and Engineering, Xi’an Technological University, Xi’an 710021, China
Funding
Shaanxi Natural Science Basic Research Project · Shaanxi International Science and Technology Cooperation Program Project
References (32)
Show source-provided references
1. Mobile English Teaching Information Service Platform Based on Edge Computing
2. Digital forest information platform as service innovation: Finnish Metsaan.fi service use, users and utilisation10.1016/j.forpol.2021.102404 ↗
3. A cloud service platform integrating additive and subtractive manufacturing with high resource efficiency10.1016/j.jclepro.2019.118379 ↗
4. Liu, B., Chen, H., and Junmei, H. (2020, January 18–22). Design and Implementation of University Continuing Education Informatization Platform Based on SaaS Model. Proceedings of the 2020 15th International Conference on Computer Science & Education (ICCSE), Delft, The Netherlands.10.1109/ICCSE49874.2020.9201626 ↗
5. Mahalle, A., Yong, J., and Tao, X. (2021, January 5–7). Challenges and Mitigation for Application Deployment over SaaS Platform in Banking and Financial Services Industry. Proceedings of the 2021 IEEE 24th International Conference on Computer Supported Cooperative Work in Design (CSCWD), Dalian, China.10.1109/CSCWD49262.2021.9437798 ↗
6. Celesti, A., Ruggeri, A., Fazio, M., Galletta, A., Villari, M., and Romano, A. (2020). Blockchain-Based Healthcare Workflow for Tele-Medical Laboratory in Federated Hospital IoT Clouds. Sensors, 20.10.3390/s20092590 ↗
7. Building of SaaS platform of hospital operational risk monitoring based on blockchain and smart contract
8. Ferraiolo, D., and Kuhn, D. (1992, January 13). Role-based access controls. Proceedings of the 15th NIST-NCSC National Computer Security Conference, Baltimore, MD, USA.
9. An Approach for Hierarchical RBAC Reconfiguration with Minimal Perturbation10.1109/ACCESS.2017.2782838 ↗
10. A Thorough Trust and Reputation Based RBAC Model for Secure Data Storage in the Cloud10.1109/TPDS.2018.2870652 ↗
11. PARBAC: Priority-Attribute-Based RBAC Model for Azure IoT Cloud10.1109/JIOT.2019.2963794 ↗
12. V B. SeIn: A blockchain-based secure mutual authentication with fine-grained access control system for industry 4.010.1016/j.jnca.2018.05.005 ↗
13. Role-based access control models10.1109/2.485845 ↗
14. The ARBAC97 model for role-based administration of roles10.1145/300830.300839 ↗
15. Proposed NIST standard for role-based access control10.1145/501978.501980 ↗
16. Achieving fine-grained access control and mitigating role explosion by utilising ABE with RBAC10.1504/IJHPCN.2017.083208 ↗
17. A Dynamic Access Control Model Using Authorising Workflow and Task-Role-Based Access Control10.1109/ACCESS.2019.2947377 ↗
18. Design and implementation of universal management system based on roles and scopes10.1063/1.3027956 ↗
19. Li, J., and Zhang, C. (2013). A three-dimensional role based user management model in web information systems. Proceedings of the 2012 International Conference on Information Technology and Software Engineering, Springer.10.1007/978-3-642-34528-9_69 ↗
20. A 4D-Role Based Access Control Model for Multitenancy Cloud Platform
21. Freudenthal, E., Pesin, T., Port, L., Keenan, E., and Karamcheti, V. (2002, January 2–5). dRBAC: Distributed role-based access control for dynamic coalition environments. Proceedings of the 22nd International Conference on Distributed Computing Systems, Vienna, Austria.10.21236/ADA440599 ↗
22. Tang, B., Li, Q., and Sandhu, R. (2013, January 10–12). A multi-tenant RBAC model for collaborative cloud services. Proceedings of the 2013 Eleventh Annual Conference on Privacy, Security and Trust, Tarragona, Spain.10.1109/PST.2013.6596058 ↗
23. A novel role-mapping algorithm for enhancing highly collaborative access control system10.1007/s10619-022-07407-9 ↗
24. Secure interoperation in a multidomain environment employing RBAC policies10.1109/TKDE.2005.185 ↗
25. Du, S., and Joshi, J.B.D. (2006, January 7–9). Supporting authorization query and inter-domain role mapping in presence of hybrid role hierarchy. Proceedings of the Eleventh ACM Symposium on Access Control Models and Technologies, Lake Tahoe, CA, USA.10.1145/1133058.1133090 ↗
26. Security policy verification for multi-domains in cloud systems10.1007/s10207-013-0205-x ↗
27. RBACA: Role-based access control architecture for multi-domain cloud environment
28. Formal definition and analysis of access control model based on role and attribute
29. A cross-domain role mapping and authorization framework for RBAC in grid systems
30. Fault tolerant operating systems10.1145/356678.356680 ↗
31. Pigeon hole principle
32. Security assessment of large-scale IT infrastructure