1st International ICST Conference on Communications and Networking in China

Research Article

Development of a Flexible Access Control Design by Extending RBAC

  • @INPROCEEDINGS{10.1109/CHINACOM.2006.344682,
        author={Yulong  Jin and Yongsun Choi and  Myeonggil Choi and Sangmun   Shin},
        title={Development of a Flexible Access Control Design by Extending RBAC},
        proceedings={1st International ICST Conference on Communications and Networking in China},
        publisher={IEEE},
        proceedings_a={CHINACOM},
        year={2007},
        month={4},
        keywords={access control knowledge-sharing system role based access control},
        doi={10.1109/CHINACOM.2006.344682}
    }
    
  • Yulong Jin
    Yongsun Choi
    Myeonggil Choi
    Sangmun Shin
    Year: 2007
    Development of a Flexible Access Control Design by Extending RBAC
    CHINACOM
    IEEE
    DOI: 10.1109/CHINACOM.2006.344682
Yulong Jin1,*, Yongsun Choi1,*, Myeonggil Choi1,*, Sangmun Shin1,*
  • 1: Department of Systems Management & Engineering, Inje University, Kimhae, Korea
*Contact email: raphy.jin@gmail.com, yschoi@inje.ac.kr, mgchoi@inje.ac.kr, sshin@inje.ac.kr

Abstract

Role based access control (RBAC) has received much attention for more than a decade as one of the most attractive solutions for access control in Web-based information systems. However, its associated characteristics are often not suitable for a varying organization requiring a flexible structure. In order to address this limitation, it may essentially be required to assess more flexibility to access control mechanisms. To this end, we propose a new extended access control mechanisms incorporating three authentication dimensions based on user, department, and role. We then demonstrate that the proposed mechanisms can improve utilization of a Web-based knowledge-sharing system.