Managing the Intertwining Among Users, Roles, Permissions, and User Relationships in an Information Flow Control Model

Abstract

Information flow control prevents information leakage during the execution of an application. Many information flow control models are available and they offer useful features. In the past years, we identified that managing the intertwining among users, roles, permissions, and user relationships is essential. Since we cannot identify a model that manages the intertwining, we developed a new model to offer the feature. This paper gives definitions to the intertwining and proposes the model.