Combining Authentication with Role-Based Access Control Based on IBS

Authentication and access control are crucial for information and system security. In this paper, we present a scheme to cryptographically provide authentication and role-based access control (RBAC) for large organizations using identity-based signature (IBS) technique. To achieve this, we first extend the elements user and role in RBAC model to cooperate with identity-based cryptography. Our scheme is derived from Cha-Cheon's identity-based signature scheme based on bilinear pairings. In our scheme, both user authentication and role-based authorization can be verified simultaneously by a user's signature, so the independent authentication procedure is eliminated. We also prove the security of the proposed scheme against adaptively chosen message and ID attack under the random oracle model