Specification Enforcement of Access Control in Information Communication Systems

摘要

While OrBAC (Organization-Based Access Control) become largely used (thanks to its clarity and simplicity). there is no work that compares its complexity with existing models. This paper demonstrates that OrBAC greatly reduces the cost of administering access control policies as well as making this process less error-prone. Moreover, while OrBAC is well-adapted to centralized systems, this work integrate a novel collaboration process to OrBAC. Finally, we present a J2EE implementation of a multithread XACML-based profiles for OrBAC.