An approach to role-based access control for digital content

Autoren Edgar Weippl
Titel An approach to role-based access control for digital content
Buchtitel Proc. Int. Conf. on Information Technology: Coding and Computing (ITCC 2001)
Typ in Konferenzband
Ort Las Vegas, NV, USA
Monat April
Jahr 2001
Seiten 290-295
SCCH ID# 62
Abstract

Role-based access control is the state-of-the-art mechanism for restricting access to resources. Today, digital content is distributed via CD-ROMS and the Internet with little or no protection. Using widely available public key cryptography, we propose to extend the paradigm of role-based access control to digital content by encapsulating it into secure document containers. Certification authorities can certify that a specific user belongs to certain group and can thus be granted access to systems (i.e. document containers) that do not know who the user actually is. Online distribution of one-time keys can be used to avoid various attacks like replays.