Policy Storage for Role-Based Access Control Systems

Role-based access control has been a focal area for many security researchers over the last decade. There have been a large number of models, and many rich specification languages. However there has been little attention paid to the way in which access control policy is stored persistently. This paper investigates policy storage from the perspective of access control to the policy itself, and of its distributed administration.

• Type: Conference
• Year: 2003
• Where: WETICE
• Authors: András Belokosztolszki, David M. Eyers, Wei Wang, Ken Moody
• Keywords: Access Control, Access Control Policy, Emerging Technology, Role-based Access Control, WETICE 2003