Injecting Task Delegation Constraints into a Role-based Access Control Model
Identifieur interne : 002B29 ( Hal/Curation ); précédent : 002B28; suivant : 002B30Injecting Task Delegation Constraints into a Role-based Access Control Model
Auteurs : Khaled Gaaloul [France] ; Erik Proper [Luxembourg (pays)] ; François Charoy [France]Source :
English descriptors
- mix :
Abstract
In role-based access control models, delegation of authorityinvolves delegating roles that a user can assume or the set of permissions that he can acquire, to other users. Several role-based delegation models have been proposed in the literature. However, these models consider only delegation in presence of the role type, which have some inherent limitations to task delegation in workflow systems. In this paper, we address task delegation in a workflow and elaborate a security model supporting delegation constraints. Delegation constraints express security requirements with regards to task's resources, user's assignment and privileges (delegation of authority). Further, we show how, using a role-based security model, we inject formalised delegation constraints to compute delegation principals with their respective privileges.
Url:
Links toward previous steps (curation, corpus...)
- to stream Hal, to step Corpus: Pour aller vers cette notice dans l'étape Curation :002B29
Links to Exploration step
Hal:hal-00646869Le document en format XML
<record><TEI><teiHeader><fileDesc><titleStmt><title xml:lang="en">Injecting Task Delegation Constraints into a Role-based Access Control Model</title><author><name sortKey="Gaaloul, Khaled" sort="Gaaloul, Khaled" uniqKey="Gaaloul K" first="Khaled" last="Gaaloul">Khaled Gaaloul</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-107894" status="OLD"><idno type="RNSR">200921239B</idno><orgName>Services and Cooperation</orgName><orgName type="acronym">SCORE</orgName><date type="end">2014-07-31</date><desc><address><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/score</ref></desc><listRelation><relation active="#struct-129671" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-423085" type="direct"></relation><relation active="#struct-206040" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-129671" type="direct"><org type="laboratory" xml:id="struct-129671" status="VALID"><idno type="RNSR">198618246Y</idno><orgName>INRIA Nancy - Grand Est</orgName><desc><address><addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/nancy</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle><tutelle active="#struct-423085" type="direct"><org type="department" xml:id="struct-423085" status="VALID"><orgName>Department of Networks, Systems and Services</orgName><orgName type="acronym">LORIA - NSS</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.loria.fr/la-recherche-en/departements/networks-systems-and-services</ref></desc><listRelation><relation active="#struct-206040" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation></org></tutelle><tutelle active="#struct-206040" type="indirect"><org type="laboratory" xml:id="struct-206040" status="VALID"><idno type="IdRef">067077927</idno><idno type="RNSR">198912571S</idno><idno type="IdUnivLorraine">[UL]RSI--</idno><orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName><orgName type="acronym">LORIA</orgName><date type="start">2012-01-01</date><desc><address><addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.loria.fr</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation><relation active="#struct-413289" type="direct"></relation><relation name="UMR7503" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-413289" type="indirect"><org type="institution" xml:id="struct-413289" status="VALID"><idno type="IdRef">157040569</idno><idno type="IdUnivLorraine">[UL]100--</idno><orgName>Université de Lorraine</orgName><orgName type="acronym">UL</orgName><date type="start">2012-01-01</date><desc><address><addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.univ-lorraine.fr/</ref></desc></org></tutelle><tutelle name="UMR7503" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="IdRef">02636817X</idno><idno type="ISNI">0000000122597504</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle></tutelles></hal:affiliation><country>France</country><placeName><settlement type="city">Nancy</settlement><settlement type="city">Metz</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Université de Lorraine</orgName></affiliation></author><author><name sortKey="Proper, Erik" sort="Proper, Erik" uniqKey="Proper E" first="Erik" last="Proper">Erik Proper</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-394711" status="INCOMING"><orgName>CRP Henri Tudor</orgName><desc><address><country key="LU"></country></address></desc><listRelation><relation active="#struct-96532" type="direct"></relation><relation active="#struct-371421" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-96532" type="direct"><org type="laboratory" xml:id="struct-96532" status="VALID"><orgName>Centre de Recherche Public Henri Tudor [Headquarters]</orgName><orgName type="acronym">CRP Henri Tudor</orgName><desc><address><addrLine>29 Avenue John F. Kennedy, 1855 LUXEMBOURG</addrLine><country key="LU"></country></address><ref type="url">http://www.tudor.lu/</ref></desc><listRelation><relation active="#struct-371421" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-371421" type="indirect"><org type="institution" xml:id="struct-371421" status="VALID"><orgName> Centre de Recherche Public Henri-Tudor [Luxembourg]</orgName><orgName type="acronym">CRP Henri-Tudor</orgName><desc><address><addrLine>6 Avenue des Hauts-Fourneaux. 4362 Esch-sur-Alzette, Luxembourg</addrLine><country key="LU"></country></address></desc></org></tutelle></tutelles></hal:affiliation><country>Luxembourg (pays)</country></affiliation></author><author><name sortKey="Charoy, Francois" sort="Charoy, Francois" uniqKey="Charoy F" first="François" last="Charoy">François Charoy</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-107894" status="OLD"><idno type="RNSR">200921239B</idno><orgName>Services and Cooperation</orgName><orgName type="acronym">SCORE</orgName><date type="end">2014-07-31</date><desc><address><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/score</ref></desc><listRelation><relation active="#struct-129671" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-423085" type="direct"></relation><relation active="#struct-206040" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-129671" type="direct"><org type="laboratory" xml:id="struct-129671" status="VALID"><idno type="RNSR">198618246Y</idno><orgName>INRIA Nancy - Grand Est</orgName><desc><address><addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/nancy</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle><tutelle active="#struct-423085" type="direct"><org type="department" xml:id="struct-423085" status="VALID"><orgName>Department of Networks, Systems and Services</orgName><orgName type="acronym">LORIA - NSS</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.loria.fr/la-recherche-en/departements/networks-systems-and-services</ref></desc><listRelation><relation active="#struct-206040" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation></org></tutelle><tutelle active="#struct-206040" type="indirect"><org type="laboratory" xml:id="struct-206040" status="VALID"><idno type="IdRef">067077927</idno><idno type="RNSR">198912571S</idno><idno type="IdUnivLorraine">[UL]RSI--</idno><orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName><orgName type="acronym">LORIA</orgName><date type="start">2012-01-01</date><desc><address><addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.loria.fr</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation><relation active="#struct-413289" type="direct"></relation><relation name="UMR7503" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-413289" type="indirect"><org type="institution" xml:id="struct-413289" status="VALID"><idno type="IdRef">157040569</idno><idno type="IdUnivLorraine">[UL]100--</idno><orgName>Université de Lorraine</orgName><orgName type="acronym">UL</orgName><date type="start">2012-01-01</date><desc><address><addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.univ-lorraine.fr/</ref></desc></org></tutelle><tutelle name="UMR7503" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="IdRef">02636817X</idno><idno type="ISNI">0000000122597504</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle></tutelles></hal:affiliation><country>France</country><placeName><settlement type="city">Nancy</settlement><settlement type="city">Metz</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Université de Lorraine</orgName></affiliation></author></titleStmt><publicationStmt><idno type="wicri:source">HAL</idno><idno type="RBID">Hal:hal-00646869</idno><idno type="halId">hal-00646869</idno><idno type="halUri">https://hal.archives-ouvertes.fr/hal-00646869</idno><idno type="url">https://hal.archives-ouvertes.fr/hal-00646869</idno><date when="2011-09-05">2011-09-05</date><idno type="wicri:Area/Hal/Corpus">002B29</idno><idno type="wicri:Area/Hal/Curation">002B29</idno></publicationStmt><sourceDesc><biblStruct><analytic><title xml:lang="en">Injecting Task Delegation Constraints into a Role-based Access Control Model</title><author><name sortKey="Gaaloul, Khaled" sort="Gaaloul, Khaled" uniqKey="Gaaloul K" first="Khaled" last="Gaaloul">Khaled Gaaloul</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-107894" status="OLD"><idno type="RNSR">200921239B</idno><orgName>Services and Cooperation</orgName><orgName type="acronym">SCORE</orgName><date type="end">2014-07-31</date><desc><address><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/score</ref></desc><listRelation><relation active="#struct-129671" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-423085" type="direct"></relation><relation active="#struct-206040" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-129671" type="direct"><org type="laboratory" xml:id="struct-129671" status="VALID"><idno type="RNSR">198618246Y</idno><orgName>INRIA Nancy - Grand Est</orgName><desc><address><addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/nancy</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle><tutelle active="#struct-423085" type="direct"><org type="department" xml:id="struct-423085" status="VALID"><orgName>Department of Networks, Systems and Services</orgName><orgName type="acronym">LORIA - NSS</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.loria.fr/la-recherche-en/departements/networks-systems-and-services</ref></desc><listRelation><relation active="#struct-206040" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation></org></tutelle><tutelle active="#struct-206040" type="indirect"><org type="laboratory" xml:id="struct-206040" status="VALID"><idno type="IdRef">067077927</idno><idno type="RNSR">198912571S</idno><idno type="IdUnivLorraine">[UL]RSI--</idno><orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName><orgName type="acronym">LORIA</orgName><date type="start">2012-01-01</date><desc><address><addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.loria.fr</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation><relation active="#struct-413289" type="direct"></relation><relation name="UMR7503" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-413289" type="indirect"><org type="institution" xml:id="struct-413289" status="VALID"><idno type="IdRef">157040569</idno><idno type="IdUnivLorraine">[UL]100--</idno><orgName>Université de Lorraine</orgName><orgName type="acronym">UL</orgName><date type="start">2012-01-01</date><desc><address><addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.univ-lorraine.fr/</ref></desc></org></tutelle><tutelle name="UMR7503" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="IdRef">02636817X</idno><idno type="ISNI">0000000122597504</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle></tutelles></hal:affiliation><country>France</country><placeName><settlement type="city">Nancy</settlement><settlement type="city">Metz</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Université de Lorraine</orgName></affiliation></author><author><name sortKey="Proper, Erik" sort="Proper, Erik" uniqKey="Proper E" first="Erik" last="Proper">Erik Proper</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-394711" status="INCOMING"><orgName>CRP Henri Tudor</orgName><desc><address><country key="LU"></country></address></desc><listRelation><relation active="#struct-96532" type="direct"></relation><relation active="#struct-371421" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-96532" type="direct"><org type="laboratory" xml:id="struct-96532" status="VALID"><orgName>Centre de Recherche Public Henri Tudor [Headquarters]</orgName><orgName type="acronym">CRP Henri Tudor</orgName><desc><address><addrLine>29 Avenue John F. Kennedy, 1855 LUXEMBOURG</addrLine><country key="LU"></country></address><ref type="url">http://www.tudor.lu/</ref></desc><listRelation><relation active="#struct-371421" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-371421" type="indirect"><org type="institution" xml:id="struct-371421" status="VALID"><orgName> Centre de Recherche Public Henri-Tudor [Luxembourg]</orgName><orgName type="acronym">CRP Henri-Tudor</orgName><desc><address><addrLine>6 Avenue des Hauts-Fourneaux. 4362 Esch-sur-Alzette, Luxembourg</addrLine><country key="LU"></country></address></desc></org></tutelle></tutelles></hal:affiliation><country>Luxembourg (pays)</country></affiliation></author><author><name sortKey="Charoy, Francois" sort="Charoy, Francois" uniqKey="Charoy F" first="François" last="Charoy">François Charoy</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-107894" status="OLD"><idno type="RNSR">200921239B</idno><orgName>Services and Cooperation</orgName><orgName type="acronym">SCORE</orgName><date type="end">2014-07-31</date><desc><address><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/score</ref></desc><listRelation><relation active="#struct-129671" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-423085" type="direct"></relation><relation active="#struct-206040" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-129671" type="direct"><org type="laboratory" xml:id="struct-129671" status="VALID"><idno type="RNSR">198618246Y</idno><orgName>INRIA Nancy - Grand Est</orgName><desc><address><addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/nancy</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle><tutelle active="#struct-423085" type="direct"><org type="department" xml:id="struct-423085" status="VALID"><orgName>Department of Networks, Systems and Services</orgName><orgName type="acronym">LORIA - NSS</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.loria.fr/la-recherche-en/departements/networks-systems-and-services</ref></desc><listRelation><relation active="#struct-206040" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-413289" type="indirect"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation></listRelation></org></tutelle><tutelle active="#struct-206040" type="indirect"><org type="laboratory" xml:id="struct-206040" status="VALID"><idno type="IdRef">067077927</idno><idno type="RNSR">198912571S</idno><idno type="IdUnivLorraine">[UL]RSI--</idno><orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName><orgName type="acronym">LORIA</orgName><date type="start">2012-01-01</date><desc><address><addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.loria.fr</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation><relation active="#struct-413289" type="direct"></relation><relation name="UMR7503" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-413289" type="indirect"><org type="institution" xml:id="struct-413289" status="VALID"><idno type="IdRef">157040569</idno><idno type="IdUnivLorraine">[UL]100--</idno><orgName>Université de Lorraine</orgName><orgName type="acronym">UL</orgName><date type="start">2012-01-01</date><desc><address><addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.univ-lorraine.fr/</ref></desc></org></tutelle><tutelle name="UMR7503" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="IdRef">02636817X</idno><idno type="ISNI">0000000122597504</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle></tutelles></hal:affiliation><country>France</country><placeName><settlement type="city">Nancy</settlement><settlement type="city">Metz</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Université de Lorraine</orgName></affiliation></author></analytic></biblStruct></sourceDesc></fileDesc><profileDesc><textClass><keywords scheme="mix" xml:lang="en"><term>access control</term><term>security</term><term>workflow</term></keywords></textClass></profileDesc></teiHeader><front><div type="abstract" xml:lang="en">In role-based access control models, delegation of authorityinvolves delegating roles that a user can assume or the set of permissions that he can acquire, to other users. Several role-based delegation models have been proposed in the literature. However, these models consider only delegation in presence of the role type, which have some inherent limitations to task delegation in workflow systems. In this paper, we address task delegation in a workflow and elaborate a security model supporting delegation constraints. Delegation constraints express security requirements with regards to task's resources, user's assignment and privileges (delegation of authority). Further, we show how, using a role-based security model, we inject formalised delegation constraints to compute delegation principals with their respective privileges.</div></front></TEI><hal api="V3"><titleStmt><title xml:lang="en">Injecting Task Delegation Constraints into a Role-based Access Control Model</title><author role="aut"><persName><forename type="first">Khaled</forename><surname>Gaaloul</surname></persName><email>khaled.gaaloul@gmail.com</email><idno type="halauthor">446543</idno><affiliation ref="#struct-107894"></affiliation><affiliation ref="#struct-394711"></affiliation></author><author role="aut"><persName><forename type="first">Erik</forename><forename type="middle">H.A.</forename><surname>Proper</surname></persName><email></email><idno type="halauthor">661090</idno><affiliation ref="#struct-394711"></affiliation></author><author role="aut"><persName><forename type="first">François</forename><surname>Charoy</surname></persName><email>Francois.Charoy@loria.fr</email><idno type="idhal">francois-charoy</idno><idno type="halauthor">53038</idno><affiliation ref="#struct-107894"></affiliation></author><editor role="depositor"><persName><forename>François</forename><surname>Charoy</surname></persName><email>francois.charoy@loria.fr</email></editor></titleStmt><editionStmt><edition n="v1" type="current"><date type="whenSubmitted">2011-11-30 21:19:51</date><date type="whenModified">2015-09-21 11:20:24</date><date type="whenReleased">2011-12-01 09:37:12</date><date type="whenProduced">2011-09-05</date><date type="whenEndEmbargoed">2011-11-30</date><ref type="file" target="https://hal.archives-ouvertes.fr/hal-00646869/document"><date notBefore="2011-11-30"></date></ref><ref type="file" subtype="author" n="1" target="https://hal.archives-ouvertes.fr/hal-00646869/file/kgaaloul_ABPSM.pdf"><date notBefore="2011-11-30"></date></ref></edition><respStmt><resp>contributor</resp><name key="103142"><persName><forename>François</forename><surname>Charoy</surname></persName><email>francois.charoy@loria.fr</email></name></respStmt></editionStmt><publicationStmt><distributor>CCSD</distributor><idno type="halId">hal-00646869</idno><idno type="halUri">https://hal.archives-ouvertes.fr/hal-00646869</idno><idno type="halBibtex">gaaloul:hal-00646869</idno><idno type="halRefHtml">The first Workshop on Alignment of Business Process and Security Modelling (ABPSM'11), Sep 2011, Riga, Latvia. pp.219 - 224, 2011</idno><idno type="halRef">The first Workshop on Alignment of Business Process and Security Modelling (ABPSM'11), Sep 2011, Riga, Latvia. pp.219 - 224, 2011</idno></publicationStmt><seriesStmt><idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno><idno type="stamp" n="LORIA2">Publications du LORIA</idno><idno type="stamp" n="INRIA-NANCY-GRAND-EST">INRIA Nancy - Grand Est</idno><idno type="stamp" n="LORIA">LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications</idno><idno type="stamp" n="LORIA-NSS" p="LORIA">Réseaux, systèmes et services</idno><idno type="stamp" n="INRIA-LORRAINE">INRIA Nancy - Grand Est</idno><idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno><idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno><idno type="stamp" n="UNIV-LORRAINE">Université de Lorraine</idno></seriesStmt><notesStmt><note type="audience" n="2">International</note><note type="invited" n="0">No</note><note type="popular" n="0">No</note><note type="peer" n="1">Yes</note><note type="proceedings" n="1">Yes</note></notesStmt><sourceDesc><biblStruct><analytic><title xml:lang="en">Injecting Task Delegation Constraints into a Role-based Access Control Model</title><author role="aut"><persName><forename type="first">Khaled</forename><surname>Gaaloul</surname></persName><email>khaled.gaaloul@gmail.com</email><idno type="halAuthorId">446543</idno><affiliation ref="#struct-107894"></affiliation><affiliation ref="#struct-394711"></affiliation></author><author role="aut"><persName><forename type="first">Erik</forename><forename type="middle">H.A.</forename><surname>Proper</surname></persName><idno type="halAuthorId">661090</idno><affiliation ref="#struct-394711"></affiliation></author><author role="aut"><persName><forename type="first">François</forename><surname>Charoy</surname></persName><email>Francois.Charoy@loria.fr</email><idno type="idHal">francois-charoy</idno><idno type="halAuthorId">53038</idno><affiliation ref="#struct-107894"></affiliation></author></analytic><monogr><title level="m">The first Workshop on Alignment of Business Process and Security Modelling (ABPSM'11)</title><meeting><title>The first Workshop on Alignment of Business Process and Security Modelling (ABPSM'11)</title><date type="start">2011-09-05</date><date type="end">2011-09-08</date><settlement>Riga</settlement><country key="LV">Latvia</country></meeting><imprint><biblScope unit="pp">219 - 224</biblScope><date type="datePub">2011-09-06</date></imprint></monogr></biblStruct></sourceDesc><profileDesc><langUsage><language ident="en">English</language></langUsage><textClass><keywords scheme="author"><term xml:lang="en">workflow</term><term xml:lang="en">access control</term><term xml:lang="en">security</term></keywords><classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode><classCode scheme="halDomain" n="info.info-oh">Computer Science [cs]/Other [cs.OH]</classCode><classCode scheme="halTypology" n="COMM">Conference papers</classCode></textClass><abstract xml:lang="en">In role-based access control models, delegation of authorityinvolves delegating roles that a user can assume or the set of permissions that he can acquire, to other users. Several role-based delegation models have been proposed in the literature. However, these models consider only delegation in presence of the role type, which have some inherent limitations to task delegation in workflow systems. In this paper, we address task delegation in a workflow and elaborate a security model supporting delegation constraints. Delegation constraints express security requirements with regards to task's resources, user's assignment and privileges (delegation of authority). Further, we show how, using a role-based security model, we inject formalised delegation constraints to compute delegation principals with their respective privileges.</abstract></profileDesc></hal></record>Pour manipuler ce document sous Unix (Dilib)
EXPLOR_STEP=$WICRI_ROOT/Wicri/Lorraine/explor/InforLorV4/Data/Hal/Curation
HfdSelect -h $EXPLOR_STEP/biblio.hfd -nk 002B29 | SxmlIndent | more
Ou
HfdSelect -h $EXPLOR_AREA/Data/Hal/Curation/biblio.hfd -nk 002B29 | SxmlIndent | more
Pour mettre un lien sur cette page dans le réseau Wicri
{{Explor lien
|wiki= Wicri/Lorraine
|area= InforLorV4
|flux= Hal
|étape= Curation
|type= RBID
|clé= Hal:hal-00646869
|texte= Injecting Task Delegation Constraints into a Role-based Access Control Model
}}
| This area was generated with Dilib version V0.6.33. |  |