Role-based Access Control Framework Research Articles

Trust Based Access Control Policy in Multi-domain of Cloud Computing

Cloud computing is a new paradigm which enables users to reduce their costs and is advantageous to both the serving and served organizations. However, security issue is a major concern in the adoption of cloud computing. The most effective way of protecting cloud computing services, resources and users is access control. This paper intends to provide a trust-based access control mechanism for cloud computing considering its multi-domain aspects. Firstly, trust is introduced into cloud computing environment and trust relationships between users and cloud platform are built. It also analyzes the difference between intra-domain trust and inter-domain trust. Furthermore, a role-based access control framework combined with trust degree in multi-domain is given from this paper. Access control in local domain directly applies RBAC model combined with trust degree, whereas in multi-domain it contains the conception of role translation. The simulation results show that the proposed method is more suitable to cloud environment and definitely can improve the reliability and validity of the system.

Protection of Digital Mammograms on PACSs Using Data Hiding Techniques

Picture archiving and communication systems (PACS) are typical information systems, which may be undermined by unauthorized users who have illegal access to the systems. This article proposes a role-based access control framework comprising two main components – a content-based steganographic module and a reversible watermarking module, to protect mammograms on PACSs. Within this framework, the content-based steganographic module is to hide patients textual information into mammograms without changing the important details of the pictorial contents and to verify the authenticity and integrity of the mammograms. The reversible watermarking module, capable of masking the contents of mammograms, is for preventing unauthorized users from viewing the contents of the mammograms. The scheme is compatible with mammogram transmission and storage on PACSs. Our experiments have demonstrated that the content-based steganographic method and reversible watermarking technique can effectively protect mammograms at PACS.

홈 네트워크 환경에서 이동 에이전트의 역할에 기반한 접근제어 프레임워크 설계 및 안전성 평가

홈 네트워크 환경은 가정내의 다양한 디지털 기기들이 네트워크로 통합한 최첨단 생활환경으로써, 이동 에이전트는 이러한 홈 네트워크 환경에서의 새로운 컴퓨팅 요소로써 활용될 것으로 기대된다. 특히, 이동 에이전트의 이동성과 비동기적 수행능력은 가정내의 디지털 기기들을 제어하고 관리하기 위해 발생하는 네트워크 트래픽을 감소 시킬 수 있다. 그러나, 이동 에이전트를 홈 네트워크 환경에서 적용하기 위해서는 이동 에이전트에 대한 접근제어가 반드시 필요하다. 기존의 홈 네트워크 시스템에서는 홈 서버를 이용하여 사용자에 대한 접근제어를 수행한다. 홈 서버는 디지털 기기와 사용자의 권한을 명시하는 접근제어 목록을 이용하여 홈 네트워크로 접근하는 사용자에 대한 접근제어를 수행한다. 이를 위해 홈 서버는 디지털 기기와 사용자의 권한 간의 최신 정보를 저장하기 위해 주기적으로 접근제어 목록을 갱신하는 추가적인 연산을 수행한다. 따라서, 본 논문에서는 홈 네트워크 환경에서 이동 에이전트의 역할에 기반한 접근제어 프레임워크(Secure-KAgent)를 보인다. 본 프레임워크는 Role-Based Access Control(RBAC)을 기초한 접근 권한의 관리가 가능하다. 또한, 본 논문에서 제안하는 롤 티켓(Role ticket)을 이용함으로써 이동 에이전트에게 안전한 역할 분배를 보장한다. A home network is a residential local area network in which digital home appliances are connected with each other. Applying the mobile agent technology to the home network is expected to provide a new computing model. In particular, mobility and asynchronous ability of mobile agent can be used to reduce network traffic generated for managing home appliances. However, in order to apply the mobile agent concept to the home network, access control for mobile agents is necessary. In the existing home network system, there is one special server, sometimes called home server This server generally has mapping tables to be updated periodically, which describes access control lists between users' authorities and corresponding devices. In this paper, we propose a role-based access control framework with mobile agents in home networks. This framework, called Secure KAgent framework, is designed and implemented based on KAgent system. It has two main characteristics: to control access permissions based on Role-Based Access Control(RBAC) scheme and to safety assign roles to mobile agents by role tickets.

XML Repository Searcher-Browser Supporting Fine-Grained Access Control

The widespread use of eXtensible Markup Language (XML) for data representation and exchange has led to increasing research interest in methods for XML content searching, presentation, and access control. This paper presents an XML repository searcher-browser application with a declarative role-based access control framework; the proposed access control model allows the definition of a finegrained access policy to be applied to the underlay data content. The auto-generated user interface for the accessing of XML content provides a light-weight application that, while taking into account the access control policy, is also suitable for distributed mobile applications.