{"id":"https://openalex.org/W1973200535","doi":"https://doi.org/10.1145/990036.990050","title":"A meta model for authorisations in application security systems and their integration into RBAC administration","display_name":"A meta model for authorisations in application security systems and their integration into RBAC administration","publication_year":2004,"publication_date":"2004-06-02","ids":{"openalex":"https://openalex.org/W1973200535","doi":"https://doi.org/10.1145/990036.990050","mag":"1973200535"},"language":"en","primary_location":{"id":"doi:10.1145/990036.990050","is_oa":false,"landing_page_url":"https://doi.org/10.1145/990036.990050","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ninth ACM symposium on Access control models and technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030229706","display_name":"Axel Kern","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Axel Kern","raw_affiliation_strings":["Beta Systems Software, AG, Koeln"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beta Systems Software, AG, Koeln","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059390484","display_name":"Martin K. Kuhlmann","orcid":"https://orcid.org/0000-0002-6439-8412"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Martin Kuhlmann","raw_affiliation_strings":["Beta Systems Software, AG, Koeln"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beta Systems Software, AG, Koeln","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016992246","display_name":"Rainer Kuropka","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rainer Kuropka","raw_affiliation_strings":["Beta Systems Software, AG, Koeln"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beta Systems Software, AG, Koeln","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052357082","display_name":"Andreas Ruthert","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andreas Ruthert","raw_affiliation_strings":["Beta Systems Software, AG, Koeln"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beta Systems Software, AG, Koeln","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.1802,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.9637429,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"87","last_page":"96"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":1.0,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":1.0,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.8886439800262451},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7794662714004517},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.7592543363571167},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.6116397976875305},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.5036992430686951},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4787927567958832},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47716206312179565},{"id":"https://openalex.org/keywords/separation-of-duties","display_name":"Separation of duties","score":0.4711305797100067},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.43926432728767395},{"id":"https://openalex.org/keywords/discretionary-access-control","display_name":"Discretionary access control","score":0.422377347946167},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.33943790197372437},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.09954404830932617}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.8886439800262451},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7794662714004517},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7592543363571167},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6116397976875305},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.5036992430686951},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4787927567958832},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47716206312179565},{"id":"https://openalex.org/C100587491","wikidata":"https://www.wikidata.org/wiki/Q1474665","display_name":"Separation of duties","level":4,"score":0.4711305797100067},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.43926432728767395},{"id":"https://openalex.org/C48814466","wikidata":"https://www.wikidata.org/wiki/Q1228590","display_name":"Discretionary access control","level":4,"score":0.422377347946167},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.33943790197372437},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.09954404830932617},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/990036.990050","is_oa":false,"landing_page_url":"https://doi.org/10.1145/990036.990050","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ninth ACM symposium on Access control models and technologies","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5699999928474426}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W224075208","https://openalex.org/W2096814801","https://openalex.org/W2099742748","https://openalex.org/W2125111386","https://openalex.org/W2149046210","https://openalex.org/W2152505375","https://openalex.org/W2154765153","https://openalex.org/W2160207938","https://openalex.org/W2162758782","https://openalex.org/W2166602595","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2148952798","https://openalex.org/W3138978413","https://openalex.org/W2378809132","https://openalex.org/W2354790132","https://openalex.org/W2371270386","https://openalex.org/W1886429574","https://openalex.org/W4386618948","https://openalex.org/W2358662376","https://openalex.org/W2387530238","https://openalex.org/W2169357262"],"abstract_inverted_index":{"This":[0],"paper":[1,66],"presents":[2],"a":[3,39,68,100,128,206],"new":[4,69],"concept":[5,156],"for":[6,31,54,71,77,88,102,117,136],"efficient":[7],"access":[8,12,56,75,133,143,171],"rights":[9,57],"administration":[10,131,138],"and":[11,23,52,96,113,132,195,200],"control.":[13],"It":[14],"focuses":[15],"on":[16,62],"the":[17,27,45,72,86,151],"special":[18],"requirements":[19],"of":[20,29,48,50,74,130,153],"application":[21,34,78,109,164],"security":[22,30,37,110,159,165],"reflects":[24],"experiences":[25],"from":[26],"implementation":[28,73],"large":[32,46],"industry":[33],"systems.":[35,174],"Application":[36],"shows":[38],"considerable":[40],"inherent":[41],"complexity":[42],"due":[43],"to":[44,119],"number":[47],"combinations":[49],"objects":[51],"processes":[53],"which":[55,80],"must":[58],"be":[59,167],"defined.":[60],"Based":[61],"practical":[63],"experiences,":[64],"this":[65,82,154,177],"introduces":[67],"approach":[70],"control":[76,172],"systems":[79],"reduces":[81],"complexity.":[83],"After":[84],"describing":[85],"challenges":[87],"such":[89],"an":[90],"approach,":[91],"we":[92,125,161,204],"introduce":[93],"process":[94,194],"spaces":[95,98,197],"object":[97,196],"as":[99,139,141],"basis":[101],"authorisations.":[103],"We":[104],"show":[105,162],"how":[106,127,163],"they":[107],"make":[108],"maintainable,":[111],"controllable":[112],"offer":[114],"sufficient":[115],"flexibility":[116],"reaction":[118],"changing":[120],"business":[121],"needs.":[122],"In":[123,175],"addition,":[124],"discuss":[126],"separation":[129],"layers":[134],"allows":[135],"convenient":[137],"well":[140],"optimised":[142],"decision":[144],"performance":[145],"in":[146],"business-critical":[147],"applications.":[148],"To":[149],"facilitate":[150],"integration":[152],"rule-based":[155],"into":[157,169],"enterprise-wide":[158],"administration,":[160],"can":[166,191],"integrated":[168],"role-based":[170],"(RBAC)":[173],"particular,":[176],"goal":[178],"is":[179],"achieved":[180],"by":[181],"enhancing":[182],"Enterprise":[183],"RBAC":[184],"(ERBAC)":[185],"with":[186],"variable":[187,193],"roles.":[188],"These":[189],"roles":[190],"contain":[192],"referencing":[198],"user":[199],"role":[201],"attributes.":[202],"Finally,":[203],"give":[205],"short":[207],"overview":[208],"over":[209],"related":[210],"work.":[211]},"counts_by_year":[{"year":2016,"cited_by_count":1},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
