Reputation and Role Based Access Control Model for Multi-domain Environments

Role based access control (RBAC) has difficulty in covering open and decentralized multi-centric systems, since it has focused on controlling access to digital resources within closed system environments and it only deals with previously known user's access which is not adequate in today's Internet world. In order to overcome the limitations in RBAC and meet the access requirements in multi-domain environments, we propose a reputation and role based access control model called R2BAC. In this model, users can be assigned to local-roles, and are able to be assigned to foreign roles based on their reputations and local-roles. R2BAC does not preclude use of credentials thus it is well suited for open systems like the multi-domain environment where users' accesses are previous known in the local domain but unknown in foreign domains.