Dynamic Authorization Specification for RBAC at CERN

Role-based access control (RBAC) project at CERN was designed to protect from accidental and unauthorized access to the LHC and injector equipment. Our model of RBAC introduces concept of dynamic authorization. Dynamic authorization is the authorization algorithm which takes into account not only de...

Descripción completa

Detalles Bibliográficos
Autor principal: Yastrebov, Ilia
Lenguaje:eng
Publicado: 2009
Materias:
Accelerators and Storage Rings
Acceso en línea:http://cds.cern.ch/record/1227225
_version_ 1780918434499919872
author Yastrebov, Ilia
author_facet Yastrebov, Ilia
author_sort Yastrebov, Ilia
collection CERN
description Role-based access control (RBAC) project at CERN was designed to protect from accidental and unauthorized access to the LHC and injector equipment. Our model of RBAC introduces concept of dynamic authorization. Dynamic authorization is the authorization algorithm which takes into account not only defined permissions, but also the internal state of each device server, called checking policy. This paper describes motivation of this algorithm and gives detailed explanation for each checking policy.
id cern-1227225
institution Organización Europea para la Investigación Nuclear
language eng
publishDate 2009
record_format invenio
spelling cern-12272252019-09-30T06:29:59Zhttp://cds.cern.ch/record/1227225engYastrebov, IliaDynamic Authorization Specification for RBAC at CERNAccelerators and Storage RingsRole-based access control (RBAC) project at CERN was designed to protect from accidental and unauthorized access to the LHC and injector equipment. Our model of RBAC introduces concept of dynamic authorization. Dynamic authorization is the authorization algorithm which takes into account not only defined permissions, but also the internal state of each device server, called checking policy. This paper describes motivation of this algorithm and gives detailed explanation for each checking policy.CERN-BE-Note-2009-037oai:cds.cern.ch:12272252009-12-08
spellingShingle Accelerators and Storage Rings
Yastrebov, Ilia
Dynamic Authorization Specification for RBAC at CERN
title Dynamic Authorization Specification for RBAC at CERN
title_full Dynamic Authorization Specification for RBAC at CERN
title_fullStr Dynamic Authorization Specification for RBAC at CERN
title_full_unstemmed Dynamic Authorization Specification for RBAC at CERN
title_short Dynamic Authorization Specification for RBAC at CERN
title_sort dynamic authorization specification for rbac at cern
topic Accelerators and Storage Rings
url http://cds.cern.ch/record/1227225
work_keys_str_mv AT yastrebovilia dynamicauthorizationspecificationforrbacatcern

Ejemplares similares