Generalized Temporal Role Based Access Control Model (GTRBAC) Part I Specification and Modeling

Generalized Temporal Role Based Access Control Model (GTRBAC) Part I Specification and Modeling

| James B. D. Joshi*, Elisa Bertino*, Usman Latif*, Arif Ghafoor*
The paper introduces the Generalized Temporal Role Based Access Control (GTRBAC) model, which extends the Temporal RBAC (TRBAC) model to address a broader range of temporal constraints. TRBAC, while addressing temporal aspects of roles and trigger-based role enabling, is limited to constraints on role enabling only. GTRBAC introduces the concept of role activation, allowing for the specification of periodic and duration constraints on roles, user-role assignments, and role-permission assignments. The model distinguishes between role enabling and activation, enabling the specification of various activation constraints such as cardinality and maximum active duration. The paper also discusses the syntax and semantics of the GTRBAC model, including event expressions, run-time requests, triggers, and conflicting events. The system architecture for implementing GTRBAC is presented, along with examples illustrating the use of periodicity and duration constraints in different scenarios. The paper concludes with a discussion of related work and future research directions.The paper introduces the Generalized Temporal Role Based Access Control (GTRBAC) model, which extends the Temporal RBAC (TRBAC) model to address a broader range of temporal constraints. TRBAC, while addressing temporal aspects of roles and trigger-based role enabling, is limited to constraints on role enabling only. GTRBAC introduces the concept of role activation, allowing for the specification of periodic and duration constraints on roles, user-role assignments, and role-permission assignments. The model distinguishes between role enabling and activation, enabling the specification of various activation constraints such as cardinality and maximum active duration. The paper also discusses the syntax and semantics of the GTRBAC model, including event expressions, run-time requests, triggers, and conflicting events. The system architecture for implementing GTRBAC is presented, along with examples illustrating the use of periodicity and duration constraints in different scenarios. The paper concludes with a discussion of related work and future research directions.
Reach us at info@study.space