Proposed NIST Standard for Role-Based Access Control

Proposed NIST Standard for Role-Based Access Control (2001)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by David F. Ferraiolo , Ravi Sandhu , Serban Gavrila , D. Richard Kuhn , Ramaswamy Chandramouli

Citations:

542 - 13 self

BibTeX

@MISC{Ferraiolo01proposednist,
    author = {David F. Ferraiolo and Ravi Sandhu and Serban Gavrila and D. Richard Kuhn and Ramaswamy Chandramouli},
    title = {Proposed NIST Standard for Role-Based Access Control},
    year = {2001}
}

OpenURL

Abstract

In this article we propose a standard for role-based access control (RBAC). Although RBAC models have received broad support as a generalized approach to access control, and are well recognized for their many advantages in performing large-scale authorization management, no single authoritative definition of RBAC exists today. This lack of a widely accepted model results in uncertainty and confusion about RBAC's utility and meaning. The standard proposed here seeks to resolve this situation by unifying ideas from a base of frequently referenced RBAC models, commercial products, and research prototypes. It is intended to serve as a foundation for product development, evaluation, and procurement specification. Although RBAC continues to evolve as users, researchers, and vendors gain experience with its application, we feel the features and components proposed in this standard represent a fundamental and stable set of mechanisms that may be enhanced by developers in further meeting the needs of their customers. As such, this document does not attempt to standardize RBAC features beyond those that have achieved acceptance in the commercial marketplace and research community, but instead focuses on defining a fundamental and stable set of RBAC components. This standard is organized into the RBAC Reference Model and the RBAC System and Administrative Functional Specification. The reference model defines the scope of features that comprise the standard and provides a consistent vocabulary in support of the specification. The RBAC System and Administrative Functional Specification defines functional requirements for administrative operations and queries for the creation, maintenance, and review of RBAC sets and relations, as well as for specifying system level functionality in sup...

Keyphrases

role-based access control nist standard rbac system stable set rbac model administrative functional specification model result access control rbac feature single authoritative definition procurement specification large-scale authorization management research prototype generalized approach rbac exists today rbac component standard represent product development rbac set broad support reference model commercial marketplace system level functionality research community rbac reference model commercial product many advantage administrative operation functional requirement consistent vocabulary