Authors: Khalifa Toumi; César Andrés; Ana Cavalli
Addresses: TELECOM and Management SudParis, CNRS UMR Samovar, 9 rue Charles Fourrier, F-91011 Evry, France ' C/ Prof. José García Santesmases, Departamento de Sistemas Informáticos y Computación, Universidad Complutense de Madrid, s/n, 28040 Madrid, Spain ' TELECOM and Management SudParis, CNRS UMR Samovar, 9 rue Charles Fourrier, F-91011 Evry, France
Abstract: Multi-organisations environment (MOE) is composed of several players that depend on each other for resources and services. Having a good access control policy to these resources becomes necessary. Moreover, being able to define a dynamic policy, meaning that it adapts over time, provides us with a more versatile way when administering these systems. In this paper, we extend the classical framework: organisation-based access control (OrBAC), adapted to MOE, adding trust information. Initially we present the theoretical framework to represent trust among organisations and users of the system, and then we present its inclusion in OrBAC as a new logical context for rule firing.
Keywords: security; trust; distributed systems; access control; formalisation; multiple organisations; multi-organisation environment.
International Journal of Autonomous and Adaptive Communications Systems, 2016 Vol.9 No.1/2, pp.164 - 178
Available online: 19 Mar 2016 *Full-text access for editors Access for subscribers Purchase this article Comment on this article