CBAC Coalition-Based Access Control

1
CBACCoalition-Based Access Control
2
CBAC ?

• Aim- an access control model for organizations
  to effectively participate in modern coalitions
  and enforcement mechanisms for coalition
  resources.
• Secure sharing requires that organizations be
  able to exercise fine-grained, policy-governed
  control over access to shared resources.

3
CBAC Principles

• RBAC has limited role while addressing security
  policy enforcement issues in collaborative
  environments.
• CBAC captures the entities involved in coalition
  resource sharing, identify the relationships
  among those entities, and detail requirements for
  building authorizations in coalition
  environments.

4
CBAC Approach

• Basic CBAC model layers coalition access control
  concepts on top of a simple RBAC model.
• Other CBAC models incorporate elements of TMAC
  and TBAC,which support the use of system context
  information in decisions to activate, synchronize
  and deactivate permissions.
• Figure 1, 2, and 3 show the different
  perspectives of various coalition stake-holders
  on coalition activities and resources.

5
(No Transcript)
6
(No Transcript)
7
(No Transcript)
8
CBAC Coalition Components

• Coalition-level entities
• COALITION, PARTNERORGANIZATION, PRINCIPALFUNCTION
  etc.
• Organization-level entities
• ORGANIZATION, ORGANIZATIONRESOURCE,
  ORGANIZATIONASSET, ROLE, TEAM, TASK etc.
• Operations-level entities
• USER etc.

9
CBAC Models

• CBACbasic
• CBACteam
• CBACtask
• CBACteamtask

10
CBAC Discussion

• How different from RBAC?
• Advantages/disadvantages