1. Institute for Cyber Security
Uni-ARBAC: A Unified Administrative Model
for Role-Based Access Control
Prosunjit Biswas, Ravi Sandhu and Ram Krishnan
Department of Computer Science
Department of Electrical and Computer Engineering
19th Information Security Conference, (ISC 2016)
September 7-9, 2016
World-Leading Research with Real-World Impact! 1 1 1

2. Existing concepts and principles The Uni-ARBAC model
Outline
Summary
Motivation
Existing concepts and principles
The Uni-ARBAC model
Variations of Uni-ARBAC
Engineering Administrative Units
Conclusion
World-Leading Research with Real-World Impact! 2 2 2

3. Summary
We have presented a unified model (Uni-ARBAC) for administering user-role and permission-role assignments by combining many of the existing administrative principles.
World-Leading Research with Real-World Impact! 3 3 3

4. Crampton & Loizou model
Motivation
ARBAC97
ARBAC02
Crampton & Loizou model
URBAC
World-Leading Research with Real-World Impact! 4 4 4

5. Inspiring concepts & principles
Separation principle [ARBAC97]
Separation of user &
permission administration
Separation of regular roles
from administration
Unification principles
Task as a group of permissions [TRBAC]
User-pool as a group of users [ARBAC02]
World-Leading Research with Real-World Impact! 5 5 5

6. Inspiring concepts & principles
Design of administrative structure
Strictly based on role hierarchy [Administrative scope]
Flexible role hierarchy [Role-graph administration]
Principles of role administration [UARBAC]
Reversibility
Administrative structure flexibility
World-Leading Research with Real-World Impact! 6 6 6

7. Uni-ARBAC Principles

8. The Uni-ARBAC model

9. Scope of Administrative Unit

10. Variation of Uni-ARBAC
Aggressive inheritance model
No-self administration model
Discriminative revoke model

11. Engineering Administrative Units
Role Graph
3. Iterate the process until all roles are partitioned into Administrative Units.
1. Use role hierarchy to discover senior and junior roles.
“Senior-most”
roles
“Junior-most”
roles
2.Separate senior-most and junior-most roles from role graph & define Administrative Units with these roles.

12. Examples of engineered Administrative units
Fig1: Role hierarchy
Fig2: Generated Administrative Units

13. Examples of engineered Administrative units
Fig1: Role hierarchy
Fig2: Generated Administrative Units

14. Conclusion
Uni-ARBAC unifies different role administrative principles into a single model. It addresses different concerns raised in the literatures of role-based administration.