1. CBAC Presentation Vishwas Patil, TIFR. CBAC Coalition-Based Access Control

2. CBAC Presentation Vishwas Patil, TIFR. CBAC: “?”  Aim:- an access control model for organizations to effectively participate in modern coalitions and enforcement mechanisms for coalition resources.  Secure sharing requires that organizations be able to exercise fine-grained, policy-governed control over access to shared resources.

3. CBAC Presentation Vishwas Patil, TIFR. CBAC: Principles  RBAC has limited role while addressing security policy enforcement issues in collaborative environments.  CBAC captures the entities involved in coalition resource sharing, identify the relationships among those entities, and detail requirements for building authorizations in coalition environments.

4. CBAC Presentation Vishwas Patil, TIFR. CBAC: Approach  Basic CBAC model layers coalition access control concepts on top of a simple RBAC model.  Other CBAC models incorporate elements of TMAC and TBAC,which support the use of system context information in decisions to activate, synchronize and deactivate permissions.  Figure 1, 2, and 3 show the different perspectives of various coalition stake-holders on coalition activities and resources.

5. CBAC Presentation Vishwas Patil, TIFR.

6. CBAC Presentation Vishwas Patil, TIFR.

7. CBAC Presentation Vishwas Patil, TIFR.

8. CBAC Presentation Vishwas Patil, TIFR. CBAC: Coalition Components  Coalition-level entities  C OALITION, P ARTNER O RGANIZATION, P RINCIPAL F UNCTION etc.  Organization-level entities  O RGANIZATION, O RGANIZATION R ESOURCE, O RGANIZATION A SSET, R OLE, T EAM, T ASK etc.  Operations-level entities  U SER etc.

9. CBAC Presentation Vishwas Patil, TIFR. CBAC: Models  CBAC basic  CBAC team  CBAC task  CBAC team+task

10. CBAC Presentation Vishwas Patil, TIFR. CBAC: Discussion  How different from RBAC?  Advantages/disadvantages