{"id":"https://openalex.org/W2099742748","doi":"https://doi.org/10.1109/csac.2002.1176305","title":"Advanced features for enterprise-wide role-based access control","display_name":"Advanced features for enterprise-wide role-based access control","publication_year":2003,"publication_date":"2003-06-26","ids":{"openalex":"https://openalex.org/W2099742748","doi":"https://doi.org/10.1109/csac.2002.1176305","mag":"2099742748"},"language":"en","primary_location":{"id":"doi:10.1109/csac.2002.1176305","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csac.2002.1176305","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"18th Annual Computer Security Applications Conference, 2002. Proceedings.","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030229706","display_name":"Axel Kern","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"A. Kern","raw_affiliation_strings":["Systor Security Solutions GmbH, Koln, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Systor Security Solutions GmbH, Koln, Germany","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5030229706"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":11.856,"has_fulltext":false,"cited_by_count":62,"citation_normalized_percentile":{"value":0.98218308,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"333","last_page":"342"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9890999794006348,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.803257942199707},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.7279291749000549},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7254102826118469},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.7156836986541748},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6033287644386292},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.578161895275116},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5742870569229126},{"id":"https://openalex.org/keywords/enterprise-system","display_name":"Enterprise system","score":0.5404483079910278},{"id":"https://openalex.org/keywords/enterprise-information-system","display_name":"Enterprise information system","score":0.5228940844535828},{"id":"https://openalex.org/keywords/enterprise-systems-engineering","display_name":"Enterprise systems engineering","score":0.4866707921028137},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.47868162393569946},{"id":"https://openalex.org/keywords/enterprise-integration","display_name":"Enterprise integration","score":0.4695965051651001},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4302132725715637},{"id":"https://openalex.org/keywords/enterprise-modelling","display_name":"Enterprise modelling","score":0.41353151202201843},{"id":"https://openalex.org/keywords/enterprise-software","display_name":"Enterprise software","score":0.38633018732070923},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.34412136673927307},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.33648669719696045},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.2779613733291626},{"id":"https://openalex.org/keywords/enterprise-architecture","display_name":"Enterprise architecture","score":0.1985720992088318},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.16916459798812866},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12150430679321289},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.08537960052490234}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.803257942199707},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.7279291749000549},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7254102826118469},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7156836986541748},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6033287644386292},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.578161895275116},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5742870569229126},{"id":"https://openalex.org/C67571701","wikidata":"https://www.wikidata.org/wiki/Q1318054","display_name":"Enterprise system","level":2,"score":0.5404483079910278},{"id":"https://openalex.org/C27295321","wikidata":"https://www.wikidata.org/wiki/Q831795","display_name":"Enterprise information system","level":2,"score":0.5228940844535828},{"id":"https://openalex.org/C146342590","wikidata":"https://www.wikidata.org/wiki/Q11606385","display_name":"Enterprise systems engineering","level":4,"score":0.4866707921028137},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.47868162393569946},{"id":"https://openalex.org/C53996427","wikidata":"https://www.wikidata.org/wiki/Q5380387","display_name":"Enterprise integration","level":3,"score":0.4695965051651001},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4302132725715637},{"id":"https://openalex.org/C138824270","wikidata":"https://www.wikidata.org/wiki/Q3318162","display_name":"Enterprise modelling","level":4,"score":0.41353151202201843},{"id":"https://openalex.org/C185765463","wikidata":"https://www.wikidata.org/wiki/Q1318054","display_name":"Enterprise software","level":2,"score":0.38633018732070923},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.34412136673927307},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.33648669719696045},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2779613733291626},{"id":"https://openalex.org/C10590034","wikidata":"https://www.wikidata.org/wiki/Q1048431","display_name":"Enterprise architecture","level":3,"score":0.1985720992088318},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.16916459798812866},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12150430679321289},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.08537960052490234},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/csac.2002.1176305","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csac.2002.1176305","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"18th Annual Computer Security Applications Conference, 2002. Proceedings.","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1963957280","https://openalex.org/W2023300255","https://openalex.org/W2044217305","https://openalex.org/W2083586095","https://openalex.org/W2103317919","https://openalex.org/W2154765153","https://openalex.org/W2157879990","https://openalex.org/W2158504322","https://openalex.org/W2162758782","https://openalex.org/W2166602595","https://openalex.org/W2315335624","https://openalex.org/W6661714221"],"related_works":["https://openalex.org/W2085863330","https://openalex.org/W2134955887","https://openalex.org/W2002687192","https://openalex.org/W3179864257","https://openalex.org/W2187603163","https://openalex.org/W2107524571","https://openalex.org/W2049154735","https://openalex.org/W2353736160","https://openalex.org/W2017510837","https://openalex.org/W2044056622"],"abstract_inverted_index":{"The":[0,150],"administration":[1,90,147],"of":[2,44,84,99,119,133],"users":[3],"and":[4,13,34,72,139],"access":[5,23,58],"rights":[6],"in":[7,49,67,106,136],"large":[8,107],"enterprises":[9],"is":[10,28],"a":[11,18,81,87],"complex":[12],"challenging":[14],"task.":[15],"Roles":[16,101],"are":[17,154],"powerful":[19],"concept":[20,83],"for":[21],"simplifying":[22],"control,":[24],"but":[25],"their":[26],"implementation":[27,104],"normally":[29],"restricted":[30],"to":[31],"single":[32],"systems":[33,48],"applications.":[35],"In":[36],"this":[37],"article":[38],"we":[39,109],"define":[40],"enterprise":[41,56,138],"roles":[42,134],"capable":[43],"spanning":[45],"all":[46],"IT":[47],"an":[50,137],"organisation.":[51],"We":[52,76,123],"show":[53,124],"how":[54],"the":[55,63,68,97,112,121,131,141,146],"role-based":[57],"control":[59],"(ERBAC)":[60],"model":[61,65,114],"exploits":[62],"RBAC":[64],"outlined":[66],"NIST":[69],"standard":[70],"draft":[71],"describe":[73],"its":[74],"extensions.":[75],"have":[77,110],"implemented":[78],"ERBAC":[79,113,152],"as":[80],"basic":[82],"SAM":[85,103],"Jupiter,":[86],"commercial":[88],"security":[89],"tool.":[91],"Based":[92],"on":[93],"practical":[94],"experience":[95],"with":[96],"deployment":[98],"Enterprise":[100],"during":[102],"projects":[105],"organisations,":[108],"enhanced":[111,151],"by":[115,156],"including":[116],"different":[117],"ways":[118],"parametrising":[120],"roles.":[122],"that":[125],"using":[126],"parameters":[127],"can":[128],"significantly":[129],"reduce":[130],"number":[132],"needed":[135],"simplify":[140],"role":[142],"structure,":[143],"thereby":[144],"reducing":[145],"effort":[148],"considerably.":[149],"features":[153],"illustrated":[155],"real-life":[157],"examples.":[158]},"counts_by_year":[{"year":2021,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}