Abstract

The generalized temporal role-based access control (GTRBAC) model provides a comprehensive set of temporal constraint expressions which can facilitate the specification of fine-grained time-based access control policies. However, the issue of the expressiveness and usability of this model has not been previously investigated. In this paper, we present an analysis of the expressiveness of the constructs provided by this model and illustrate that its constraints-set is not minimal. We show that there is a subset of GTRBAC constraints that is sufficient to express all the access constraints that can be expressed using the full set. We also illustrate that a nonminimal GTRBAC constraint set can provide better flexibility and lower complexity of constraint representation. Based on our analysis, a set of design guidelines for the development of GTRBAC-based security administration is presented.

Journal
IEEE Transactions on Professional Communication
Published
2005-02-01
DOI
10.1109/tdsc.2005.18
CompPile
Search in CompPile ↗
Open Access
Closed
Topics
Export

Citation Context

Cited by in this index (0)

No articles in this index cite this work.

Cites in this index (0)

No references match articles in this index.

Also cites 24 works outside this index ↓
  1. 10.1145/382912.382913
  2. 10.1145/504909.504912
  3. 10.1145/293910.293151
  4. 10.1145/501978.501979
  5. 10.1145/300830.300837
  6. 10.1109/MC.2004.1297300
  7. 10.1145/1108906.1108909
  8. 10.1145/373256.373258
  9. 10.1007/978-3-540-24741-8_3
  10. 10.1145/270152.270176
  11. 10.1145/359205.359224
  12. 10.1109/MIC.2004.53
  13. 10.1109/2.901169
  14. 10.1145/507711.507724
  15. 10.1109/TKDE.2005.1
  16. 10.1145/567331.567336
  17. 10.1145/775412.775421
  18. 10.1145/300830.300832
  19. 10.1145/354876.354878
  20. 10.1145/383775.383777
  21. 10.1145/286884.286891
  22. 10.1109/2.485845
  23. 10.1109/CSFW.1997.596811
  24. 10.1109/ENABL.2001.953414