The P-IRBAC 2000 Model: Permission Management for Interoperable Role-Based Access Control

Secure interaction and interoperability between administrative domains is a major concern. For domains that utilize RBAC proposed the IRB AC 2000 model, which can be used to establish a flexible policy for dynamic inter-domain role translations. However, there are scenarios under which the associations in IRBAC model become difficult to manage. One such scenario is where permission checking must be done very efficiently among large and complex role hierarchies when dynamic role translation is invoked. Another is where there is a danger of distributing the unsafe permissions to a foreign role. Therefore, we introduce the permissions management for IRBAC 2000 model. The P-IRBAC builds over IRBAC model by employing RBAC to manage inter-domain role translations, following the concepts outlined in ARBAC97.