IRBAC 2000: Secure Interoperability Using Dynamic Role Translation

The secure interaction between two or more administrative domains is a major concern. We examine the issues of secure interoperability between two security domains operating under the Role Based Access Control (RBAC) Model. We propose a model that quickly establishes a flexible policy for dynamic role translation. The role hierarchies of the local and foreign domains can be manipulated through our Role Editor which is used to set up associations between these hierarchies. These associations result in a combined partial ordering of the role hierarchies, which can be used to make meaningful access control decisions for secure interoperability.