Extended Role-Based Security System Using Context Information

RBAC models have generated great interest in the security community as a powerful and generalized approach to security management. However traditional RBAC cannot easily support context based access control. In this paper, we propose an extended RBAC model based on context information. The core RBAC model is extended with a general expression of context information. Context rules that have ability to dynamically generate temporal roles are included in order to enhance system flexibility.