IEICE TRANSACTIONS on Information
Inconsistency Resolution Method for RBAC Based Interoperation
Summary :
In this paper, we propose an inconsistency resolution method based on a new concept, insecure backtracking role mapping. By analyzing the role graph, we prove that the root cause of security inconsistency in distributed interoperation is the existence of insecure backtracking role mapping. We propose a novel and efficient algorithm to detect the inconsistency via finding all of the insecure backtracking role mappings. Our detection algorithm will not only report the existence of inconsistency, but also generate the inconsistency information for the resolution. We reduce the inconsistency resolution problem to the known Minimum-Cut problem, and based on the results generated by our detection algorithm we propose an inconsistency resolution algorithm which could guarantee the security of distributed interoperation. We demonstrate the effectiveness of our approach through simulated tests and a case study.
- Publication
- IEICE TRANSACTIONS on Information Vol.E93-D No.5 pp.1070-1079
- Publication Date
- 2010/05/01
- Publicized
- Online ISSN
- 1745-1361
- DOI
- 10.1587/transinf.E93.D.1070
- Type of Manuscript
- Special Section PAPER (Special Section on Information and Communication System Security)
- Category
Authors
Keyword
Latest Issue
Copyrights notice of machine-translated contents
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Cite this
Copy
Chao HUANG, Jianling SUN, Xinyu WANG, Di WU, "Inconsistency Resolution Method for RBAC Based Interoperation" in IEICE TRANSACTIONS on Information,
vol. E93-D, no. 5, pp. 1070-1079, May 2010, doi: 10.1587/transinf.E93.D.1070.
Abstract: In this paper, we propose an inconsistency resolution method based on a new concept, insecure backtracking role mapping. By analyzing the role graph, we prove that the root cause of security inconsistency in distributed interoperation is the existence of insecure backtracking role mapping. We propose a novel and efficient algorithm to detect the inconsistency via finding all of the insecure backtracking role mappings. Our detection algorithm will not only report the existence of inconsistency, but also generate the inconsistency information for the resolution. We reduce the inconsistency resolution problem to the known Minimum-Cut problem, and based on the results generated by our detection algorithm we propose an inconsistency resolution algorithm which could guarantee the security of distributed interoperation. We demonstrate the effectiveness of our approach through simulated tests and a case study.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.E93.D.1070/_p
Copy
@ARTICLE{e93-d_5_1070,
author={Chao HUANG, Jianling SUN, Xinyu WANG, Di WU, },
journal={IEICE TRANSACTIONS on Information},
title={Inconsistency Resolution Method for RBAC Based Interoperation},
year={2010},
volume={E93-D},
number={5},
pages={1070-1079},
abstract={In this paper, we propose an inconsistency resolution method based on a new concept, insecure backtracking role mapping. By analyzing the role graph, we prove that the root cause of security inconsistency in distributed interoperation is the existence of insecure backtracking role mapping. We propose a novel and efficient algorithm to detect the inconsistency via finding all of the insecure backtracking role mappings. Our detection algorithm will not only report the existence of inconsistency, but also generate the inconsistency information for the resolution. We reduce the inconsistency resolution problem to the known Minimum-Cut problem, and based on the results generated by our detection algorithm we propose an inconsistency resolution algorithm which could guarantee the security of distributed interoperation. We demonstrate the effectiveness of our approach through simulated tests and a case study.},
keywords={},
doi={10.1587/transinf.E93.D.1070},
ISSN={1745-1361},
month={May},}
Copy
TY - JOUR
TI - Inconsistency Resolution Method for RBAC Based Interoperation
T2 - IEICE TRANSACTIONS on Information
SP - 1070
EP - 1079
AU - Chao HUANG
AU - Jianling SUN
AU - Xinyu WANG
AU - Di WU
PY - 2010
DO - 10.1587/transinf.E93.D.1070
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E93-D
IS - 5
JA - IEICE TRANSACTIONS on Information
Y1 - May 2010
AB - In this paper, we propose an inconsistency resolution method based on a new concept, insecure backtracking role mapping. By analyzing the role graph, we prove that the root cause of security inconsistency in distributed interoperation is the existence of insecure backtracking role mapping. We propose a novel and efficient algorithm to detect the inconsistency via finding all of the insecure backtracking role mappings. Our detection algorithm will not only report the existence of inconsistency, but also generate the inconsistency information for the resolution. We reduce the inconsistency resolution problem to the known Minimum-Cut problem, and based on the results generated by our detection algorithm we propose an inconsistency resolution algorithm which could guarantee the security of distributed interoperation. We demonstrate the effectiveness of our approach through simulated tests and a case study.
ER -
English
