1
Role-Based Access Control(RBAC)
Prof. Ravi SandhuExecutive Director and Endowed Chair
January 29, 2016
© Ravi Sandhu World-Leading Research with Real-World Impact!
CS 6393 Lecture 3
© Ravi Sandhu 2World-Leading Research with Real-World Impact!
Access Control
Discretionary Access Control (DAC), 1970
Mandatory Access Control (MAC), 1970
Role Based Access Control (RBAC), 1995
Attribute Based Access Control (ABAC), ????
Fixedpolicy
Flexiblepolicy
The RBAC Story
© Ravi Sandhu 3
2nd expansion phase1st expansion phase
1995 2000 2005 2008
Amount ofPublications
Year of Publication
28 30 30 35 40 48 53 88 85 88 112 103 111 866∑
1992
3 2 7 3
80
60
40
20
0
Pre-RBAC Early RBAC
100
RBAC96paper
ProposedStandard
StandardAdopted
World-Leading Research with Real-World Impact!
© Ravi Sandhu 4World-Leading Research with Real-World Impact!
RBAC: Role-Based Access Control
− Access is determined by roles− A user’s roles are assigned by security
administrators− A role’s permissions are assigned by security
administrators
First emerged: mid 1970sFirst models: mid 1990s
Is RBAC MAC or DAC or neither?
− RBAC can be configured to do MAC− RBAC can be configured to do DAC− RBAC is policy neutral
RBAC is neither MAC nor DAC!
RBAC96 Model Family
ROLES
USER-ROLEASSIGNMENT
PERMISSIONS-ROLEASSIGNMENT
USERS PERMISSIONS
... SESSIONS
ROLE HIERARCHIES
CONSTRAINTS
© Ravi Sandhu 5
P model
World-Leading Research with Real-World Impact!
RBAC96 Model Family
© Ravi Sandhu 6World-Leading Research with Real-World Impact!
RBAC0BASIC RBAC
RBAC3ROLE HIERARCHIES +
CONSTRAINTS
RBAC1ROLE
HIERARCHIESRBAC2
CONSTRAINTS
RBAC SECURITY PRINCIPLES
− Abstraction of Privileges Credit is different from Debit even though both require read and write
− Separation of Administrative Functions Separation of user-role assignment from role-permission assignment
− Least Privilege Right-size the roles Don’t activate all roles all the time
− Separation of Duty Static separation: purchasing manager versus accounts payable manager Dynamic separation: cash-register clerk versus cash-register manager
© Ravi Sandhu 7World-Leading Research with Real-World Impact!
ROLES AS POLICY
A role brings together− a collection of users and− a collection of permissions
These collections will vary over time− A role has significance and meaning beyond the particular
users and permissions brought together at any moment
© Ravi Sandhu 8World-Leading Research with Real-World Impact!
ROLES VERSUS GROUPS
Groups are often defined as− a collection of users
A role is− a collection of users and− a collection of permissions
Some authors define role as − a collection of permissions
Most Operating Systems support groups− BUT do not support selective activation of groups
Selective activation conflicts with negative groups (or roles)
© Ravi Sandhu 9World-Leading Research with Real-World Impact!
© Ravi Sandhu 10World-Leading Research with Real-World Impact!
HIERARCHICAL ROLES
Health-Care Provider
Physician
Primary-CarePhysician
SpecialistPhysician
© Ravi Sandhu 11World-Leading Research with Real-World Impact!
HIERARCHICAL ROLES
Engineer
HardwareEngineer
SoftwareEngineer
SupervisingEngineer
© Ravi Sandhu 12World-Leading Research with Real-World Impact!
PRIVATE ROLES
Engineer
HardwareEngineer
SoftwareEngineer
SupervisingEngineer
HardwareEngineer’
SoftwareEngineer’
© Ravi Sandhu 13World-Leading Research with Real-World Impact!
EXAMPLE ROLE HIERARCHY
Employee (E)
Engineering Department (ED)
Project Lead 1(PL1)
Engineer 1(E1)
Production 1(P1)
Quality 1(Q1)
Director (DIR)
Project Lead 2(PL2)
Engineer 2(E2)
Production 2(P2)
Quality 2(Q2)
PROJECT 2PROJECT 1
© Ravi Sandhu 14World-Leading Research with Real-World Impact!
EXAMPLE ROLE HIERARCHY
Employee (E)
Engineering Department (ED)
Project Lead 1(PL1)
Engineer 1(E1)
Production 1(P1)
Quality 1(Q1)
Project Lead 2(PL2)
Engineer 2(E2)
Production 2(P2)
Quality 2(Q2)
PROJECT 2PROJECT 1
© Ravi Sandhu 15World-Leading Research with Real-World Impact!
EXAMPLE ROLE HIERARCHY
Project Lead 1(PL1)
Engineer 1(E1)
Production 1(P1)
Quality 1(Q1)
Director (DIR)
Project Lead 2(PL2)
Engineer 2(E2)
Production 2(P2)
Quality 2(Q2)
PROJECT 2PROJECT 1
© Ravi Sandhu 16World-Leading Research with Real-World Impact!
EXAMPLE ROLE HIERARCHY
Project Lead 1(PL1)
Engineer 1(E1)
Production 1(P1)
Quality 1(Q1)
Project Lead 2(PL2)
Engineer 2(E2)
Production 2(P2)
Quality 2(Q2)
PROJECT 2PROJECT 1
CONSTRAINTS
Mutually Exclusive Roles− Static Exclusion: The same individual can never hold both roles− Dynamic Exclusion: The same individual can never hold both roles in the
same context Mutually Exclusive Permissions
− Static Exclusion: The same role should never be assigned both permissions
− Dynamic Exclusion: The same role can never hold both permissions in the same context
Cardinality Constraints on User-Role Assignment− At most k users can belong to the role− At least k users must belong to the role− Exactly k users must belong to the role
Cardinality Constraints on Permissions-Role Assignment− At most k roles can get the permission− At least k roles must get the permission− Exactly k roles must get the permission
© Ravi Sandhu 17World-Leading Research with Real-World Impact!
© Ravi Sandhu 18World-Leading Research with Real-World Impact!
NIST MODEL: CORE RBAC
© Ravi Sandhu 19World-Leading Research with Real-World Impact!
NIST MODEL: HIERARCHICAL RBAC
© Ravi Sandhu 20World-Leading Research with Real-World Impact!
SSD IN HIERARCHICAL RBAC
© Ravi Sandhu 21World-Leading Research with Real-World Impact!
DSD IN HIERARCHICAL RBAC
© Ravi Sandhu 22World-Leading Research with Real-World Impact!
NIST MODEL FAMILY
Compare RBAC96 Model Family
© Ravi Sandhu 23World-Leading Research with Real-World Impact!
RBAC0BASIC RBAC
RBAC3ROLE HIERARCHIES +
CONSTRAINTS
RBAC1ROLE
HIERARCHIESRBAC2
CONSTRAINTS
© Ravi Sandhu 24World-Leading Research with Real-World Impact!
OM-AM
What?
How?
Assurance
Model
Architecture
Mechanism
Objectives
© Ravi Sandhu 25World-Leading Research with Real-World Impact!
PEI Models
Idealized
Enforceable(Approximate)
Codeable
RBAC: SERVER PULL
© Ravi Sandhu 26
E model
Client Server
User-roleAuthorization
Server
World-Leading Research with Real-World Impact!
RBAC: CLIENT PULL
© Ravi Sandhu 27
E model
Client Server
User-roleAuthorization
Server
World-Leading Research with Real-World Impact!
RBAC: PROXY-BASED
© Ravi Sandhu 28
E model
Client ServerProxyServer
User-roleAuthorization
Server
World-Leading Research with Real-World Impact!
29
Discuss highlights of reference papers
© Ravi Sandhu World-Leading Research with Real-World Impact!
![Towards Model Transformation between SecureUML and UMLsec ... · Role-based Access Control The main elements of the RBAC model [17] are Users, Roles, Objects, Operations, and Permissions.](https://static.documents.pub/doc/80x56/5f42faee031b4024f60910e0/towards-model-transformation-between-secureuml-and-umlsec-role-based-access.jpg)
