Integrating Object Oriented Role-Based Access Control Model with Mandatory Access Control Principles

Abstract

In this paper, an Object Oriented Role-based Access Control model (ORBAC) is introduced and the confinement problem that may occur on the ORBAC based system is illustrated. In order to solve the problem, a technique called information flow analysis is proposed. Moreover, based on the information flow technique and the principle of mandatory access control (MAC) principles, a message filtering algorithm and a role set assignment method are developed to deal with the confinement problem on ORBAC.