سند علمی

Role-Based Security for Distributed Object Systems - Enabling Technologies: Infrastructure for Collaborative Enterprises, 1996. Proceedings of the 5th

چکیده

This paper describes a security architecture designed to support role-based access control for distributed object systems in a large-scale, rrzulti-organisational enterprise in which domains are used to group objects for specifying security policies. We use the concept of a role to deJine access control related to a position within an organisation although our role framework caters for the specification of both authorisation and obligation policies. Access control and authentication is implemented using security agents on a per host basis to achieve a high degree of transparency to the application level. Cascaded delegation of access rights is also supported. The domain bused authentication service uses symmetric cryptography and is implemented by replicated servers which maintain minimal state.

اسناد مشابه