The implementation of the RBAC model of the UML-Java platform

• Autorzy: Poniszewska A. , Goncalves G. , Hemery F.
• Języki publikacji: EN

Abstrakty

EN

The role-based access control (RBAC) model is one of the policies used to access control in the information systems. This powerful technology is very useful for managing the security of the information systems of the enterprises. In order to utilise its potential, the roles - the main component of this model - have to be properly constructed to reflect the organisational access control policy and the needs of the system. This requires the development of the components of the RBAC model in the correct way and implementation with the use of suitable tools. This paper presents the extension of the standard RBAC model and the implementation of this extension. The proposed approach is realised using the Unified Modelling Language (UML). The UML language was chosen because nowadays it is the standard tool, properly reflecting the description of the information system and its needs.

Słowa kluczowe

EN

RBAC; role-bassed access control; access control; security of information system; UML; Unified Modelling Languagge

PL

RBAC; kontrola dostępu oparta na rolach; kontrola dostępu; bezpieczeństwo systemu informatycznego; UML; zunifikowany język modelowania

• Wydawca: Wydawnictwo Politechniki Łódzkiej
• Czasopismo: Journal of Applied Computer Science
• Rocznik: 2001
• Tom: Vol. 9, nr 2
• Strony: 53--67
• Opis fizyczny: Bibliogr. 6 poz.

Twórcy

autor

Poniszewska A.

• Technical University of Łódź, Institute of Computer Science, Poland

autor

Goncalves G.

• Université d’Artois, Bethune, France

autor

Hemery F.

• Université d’Artois, Bethune, France

Bibliografia

• [1] R. S. Sandhu; “Role hierarchies and Constraints for Lattice-Based Access Control”, Proc. Fourth European Symposium on Research in Computer Security, Rome, Italy, 1996,
• [2] R. S. Sandhu, P. Samarati; “Authentication, Access Control and Intrusion Detection”, The Computer Science and Engineering hand-book, 1997,
• [3] R. S. Sandhu, P. Samarati; “Access Control; Principles and Practice”, IEEE Communication, 1994,
• [4] R. S. Sandhu, Q. Munawer; “How to do Discretionary Access Control Using Roles”, Proceeding of 3rd ACM Workshop on Role-Based Access Control, Fairfax, 1998,
• [5] G. Goncalves, F. Hemery; “From use case of UML to user profile of management information system”, 2000,
• [6] S. Castro, M. G. Fugini, G. Martella, P. Samarati; “Database Security”, Addison- Wesley, 1994.