An Organizational Structure-Based Administration Model for Decentralized Access Control

吳世宗(Sejong Oh) ； 邊昶又(Changwoo Byun) ； 朴錫(Seog Park)

《Journal of Information Science and Engineering》 22卷6期 (2006/11) Pp. 1465-1483

https://doi.org/10.6688/JISE.2006.22.6.10

並列摘要

We propose an effective administration model using organizational structure for a decentralized role-based access control environment. Access control administration is a critical issue for large organizations and information systems. A large organization needs decentralized access control by multiple security officers because it has many users and information objects, and a single security officer cannot do all the work. If an organization has multiple security officers, managing them is another important security task. The task includes defining the authority scope and keeping the administrative operations of each security officer legal. Access control administration means controlling security officers’ administrative work. ARBAC defines authority scope using the role hierarchy, and it leads many short-comings. Our proposed model uses the organizational structure as a basis for defining authority scope and keeping administrative operations legal. The proposed model over-comes the shortcomings of ARBAC, and offers a clear rationale for access control ad-ministration.

並列關鍵字

access control ； role ； organization ； organizational structure ； security