{"id":"https://openalex.org/W2118930213","doi":"https://doi.org/10.1145/775412.775421","title":"An approach to engineer and enforce context constraints in an RBAC environment","display_name":"An approach to engineer and enforce context constraints in an RBAC environment","publication_year":2003,"publication_date":"2003-06-02","ids":{"openalex":"https://openalex.org/W2118930213","doi":"https://doi.org/10.1145/775412.775421","mag":"2118930213"},"language":"en","primary_location":{"id":"doi:10.1145/775412.775421","is_oa":false,"landing_page_url":"https://doi.org/10.1145/775412.775421","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the eighth ACM symposium on Access control models and technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110757945","display_name":"Gustaf Neumann","orcid":null},"institutions":[{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Gustaf Neumann","raw_affiliation_strings":["Vienna University of Economics and BA, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and BA, Austria","institution_ids":["https://openalex.org/I102248843"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063785888","display_name":"Mark Strembeck","orcid":"https://orcid.org/0000-0003-1680-9296"},"institutions":[{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Mark Strembeck","raw_affiliation_strings":["Vienna University of Economics and BA, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and BA, Austria","institution_ids":["https://openalex.org/I102248843"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102248843"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":107,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"65","last_page":"79"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9898999929428101,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.960049033164978},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.7995320558547974},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7857835292816162},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6900171637535095},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.6435163617134094},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6351691484451294},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5224862694740295},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.499539852142334},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41525495052337646},{"id":"https://openalex.org/keywords/context-model","display_name":"Context model","score":0.413994163274765},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.35547876358032227},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1714012622833252},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12565931677818298},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.07026997208595276}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.960049033164978},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.7995320558547974},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7857835292816162},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6900171637535095},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.6435163617134094},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6351691484451294},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5224862694740295},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.499539852142334},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41525495052337646},{"id":"https://openalex.org/C183322885","wikidata":"https://www.wikidata.org/wiki/Q17007702","display_name":"Context model","level":3,"score":0.413994163274765},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.35547876358032227},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1714012622833252},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12565931677818298},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.07026997208595276},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/775412.775421","is_oa":false,"landing_page_url":"https://doi.org/10.1145/775412.775421","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the eighth ACM symposium on Access control models and technologies","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.3.2125","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.3.2125","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://wi.wu-wien.ac.at/home/mark/publications/sacmat03.ps.gz","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.89.2391","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.89.2391","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://wwwi.wu-wien.ac.at/home/mark/publications/sacmat03.pdf","raw_type":"text"},{"id":"pmh:oai:research.wu.ac.at:openaire_cris_publications/4a25d873-42db-4d56-8c31-5696baf2aa45","is_oa":false,"landing_page_url":"https://research.wu.ac.at/de/publications/4a25d873-42db-4d56-8c31-5696baf2aa45","pdf_url":null,"source":{"id":"https://openalex.org/S7407055123","display_name":"WU Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Neumann, G & Strembeck, M 2003, An Approach to Engineer and Enforce Context Constraints in an RBAC Environment. in Proc. of 8th ACM Symposium on Access Control Models and Technologies (SACMAT), Como, Italy, June 2003.","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1649645444","https://openalex.org/W1875598785","https://openalex.org/W1905153225","https://openalex.org/W1967661515","https://openalex.org/W1975156286","https://openalex.org/W1984946784","https://openalex.org/W1985951810","https://openalex.org/W1990719527","https://openalex.org/W1998109675","https://openalex.org/W1998208223","https://openalex.org/W2000952251","https://openalex.org/W2010109814","https://openalex.org/W2012419258","https://openalex.org/W2014204110","https://openalex.org/W2015432046","https://openalex.org/W2021079739","https://openalex.org/W2024211312","https://openalex.org/W2038953226","https://openalex.org/W2040445999","https://openalex.org/W2050141080","https://openalex.org/W2057108693","https://openalex.org/W2063838657","https://openalex.org/W2067106503","https://openalex.org/W2076004681","https://openalex.org/W2076617786","https://openalex.org/W2084069552","https://openalex.org/W2093945134","https://openalex.org/W2104568606","https://openalex.org/W2111353076","https://openalex.org/W2117818414","https://openalex.org/W2124080036","https://openalex.org/W2128026023","https://openalex.org/W2132000990","https://openalex.org/W2134342348","https://openalex.org/W2151451947","https://openalex.org/W2154508421","https://openalex.org/W2154765153","https://openalex.org/W2164396200","https://openalex.org/W2166602595","https://openalex.org/W2167974070","https://openalex.org/W2171760457","https://openalex.org/W4285719527","https://openalex.org/W6605232733","https://openalex.org/W6646801298","https://openalex.org/W6679822280","https://openalex.org/W6682907634"],"related_works":["https://openalex.org/W2373984226","https://openalex.org/W2349137515","https://openalex.org/W2130613250","https://openalex.org/W2361337511","https://openalex.org/W1513229083","https://openalex.org/W2358774039","https://openalex.org/W2353815999","https://openalex.org/W4390864104","https://openalex.org/W2374393728","https://openalex.org/W2124367090"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"an":[3,64,78,102,126],"approach":[4,22,115],"that":[5,33,84],"uses":[6],"special":[7],"purpose":[8],"RBAC":[9,31,65,104],"constraints":[10],"to":[11,106,118],"base":[12],"certain":[13],"access":[14,54,137],"control":[15,138],"decisions":[16],"on":[17,87],"context":[18,24,74,82,111],"information.":[19],"In":[20],"our":[21,114],"a":[23,29,60],"constraint":[25,32],"is":[26,63,68,85],"defined":[27],"as":[28],"dynamic":[30],"checks":[34],"the":[35,52,97,108,120,130],"actual":[36],"values":[37],"of":[38,101,110,122,134],"one":[39,71],"or":[40,72],"more":[41,73],"contextual":[42],"attributes":[43],"for":[44,81,129],"predefined":[45],"conditions.":[46],"If":[47],"these":[48],"conditions":[49],"are":[50],"satisfied,":[51],"corresponding":[53],"request":[55],"can":[56],"be":[57],"permitted.":[58],"Accordingly,":[59],"conditional":[61],"permission":[62,66],"which":[67],"constrained":[69],"by":[70],"constraints.":[75,112],"We":[76],"present":[77],"engineering":[79,90],"process":[80],"constraints,":[83],"based":[86],"goal-oriented":[88],"requirements":[89],"techniques,":[91],"and":[92,99,124,132],"describe":[93],"how":[94],"we":[95,116],"extended":[96],"design":[98],"implementation":[100],"existing":[103],"service":[105],"enable":[107],"enforcement":[109,133],"With":[113],"aim":[117],"preserve":[119],"advantages":[121],"RBAC,":[123],"offer":[125],"additional":[127],"means":[128],"definition":[131],"fine-grained":[135],"context-dependent":[136],"policies.":[139]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":9}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}