Entry Ni:2010:PAR from tissec.bib

Last update: Sun Oct 15 02:58:48 MDT 2017                Valid HTML 3.2!

Index sections

Top | Symbols | Numbers | Math | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

BibTeX entry

@Article{Ni:2010:PAR,
  author =       "Qun Ni and Elisa Bertino and Jorge Lobo and Carolyn
                 Brodie and Clare-Marie Karat and John Karat and Alberto
                 Trombeta",
  title =        "Privacy-aware role-based access control",
  journal =      j-TISSEC,
  volume =       "13",
  number =       "3",
  pages =        "24:1--24:??",
  month =        jul,
  year =         "2010",
  CODEN =        "ATISBQ",
  DOI =          "https://doi.org/10.1145/1805974.1805980",
  ISSN =         "1094-9224 (print), 1557-7406 (electronic)",
  ISSN-L =       "1094-9224",
  bibdate =      "Wed Jul 28 14:57:15 MDT 2010",
  bibsource =    "http://portal.acm.org/;
                 http://www.math.utah.edu/pub/tex/bib/tissec.bib",
  abstract =     "In this article, we introduce a comprehensive
                 framework supporting a privacy-aware access control
                 mechanism, that is, a mechanism tailored to enforce
                 access control to data containing personally
                 identifiable information and, as such, privacy
                 sensitive. The key component of the framework is a
                 family of models (P-RBAC) that extend the well-known
                 RBAC model in order to provide full support for
                 expressing highly complex privacy-related policies,
                 taking into account features like purposes and
                 obligations. We formally define the notion of
                 privacy-aware permissions and the notion of conflicting
                 permission assignments in P-RBAC, together with
                 efficient conflict-checking algorithms. The framework
                 also includes a flexible authoring tool, based on the
                 use of the SPARCLE system, supporting the high-level
                 specification of P-RBAC permissions. SPARCLE supports
                 the use of natural language for authoring policies and
                 is able to automatically generate P-RBAC permissions
                 from these natural language specifications. In the
                 article, we also report performance evaluation results
                 and contrast our approach with other relevant access
                 control and privacy policy frameworks such as P3P,
                 EPAL, and XACML.",
  acknowledgement = ack-nhfb,
  articleno =    "24",
  fjournal =     "ACM Transactions on Information and System Security",
  journal-URL =  "http://portal.acm.org/browse_dl.cfm?idx=J789",
  keywords =     "model; Privacy; purpose; Role-based access control",
}

Related entries