UML-based representation of role-based access control

M. E. Shin, Gail-Joon Ahn

Research output: Chapter in Book/Report/Conference proceedingConference contribution

54 Scopus citations

Abstract

In role-based access control (RBAC) permissions are associated with roles, and users are made members of appropriate roles thereby acquiring the roles' permissions. The principal motivation behind RBAC is to simplify administration. Several framework for the development of role-based systems have been introduced. However, there are a few works specifying RBAC in a way which system developers or software engineers can easily understand and refer to develop role-based systems. The Unified Modeling Language (UML) is a general-purpose visual modeling language in which we can specify, visualize, and document the components of a software system. In this paper we represent the RBAC model with this well-known modeling language to reduce a gap between security models and system developments. We specify the RBAC model with three views: static view, functional view, and dynamic view. In addition, we briefly discuss about the future directions.

Original languageEnglish (US)
Title of host publicationProceedings of the Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, WETICE
PublisherIEEE Computer Society
Pages195-200
Number of pages6
Volume2000-January
ISBN (Print)0769507980
DOIs
StatePublished - 2000
Externally publishedYes
EventIEEE 9th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, WET ICE 2000 - Gaithersburg, United States
Duration: Jun 14 2000Jun 16 2000

Other

OtherIEEE 9th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, WET ICE 2000
CountryUnited States
CityGaithersburg
Period6/14/006/16/00

    Fingerprint

Keywords

  • Access control
  • Humans
  • Information security
  • Permission
  • Postal services
  • Qualifications
  • Software engineering
  • Software systems
  • Unified modeling language
  • Visualization

ASJC Scopus subject areas

  • Hardware and Architecture
  • Software

Cite this

Shin, M. E., & Ahn, G-J. (2000). UML-based representation of role-based access control. In Proceedings of the Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, WETICE (Vol. 2000-January, pp. 195-200). [883728] IEEE Computer Society. https://doi.org/10.1109/ENABL.2000.883728