{"id":"https://openalex.org/W1980437932","doi":"https://doi.org/10.1145/1805974.1805980","title":"Privacy-aware role-based access control","display_name":"Privacy-aware role-based access control","publication_year":2010,"publication_date":"2010-07-01","ids":{"openalex":"https://openalex.org/W1980437932","doi":"https://doi.org/10.1145/1805974.1805980","mag":"1980437932"},"language":"en","primary_location":{"id":"doi:10.1145/1805974.1805980","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1805974.1805980","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060367946","display_name":"Qun Ni","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qun Ni","raw_affiliation_strings":["Purdue University, Lafayette, IN","Purdue University, Lafayette, In"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, Lafayette, IN","institution_ids":[]},{"raw_affiliation_string":"Purdue University, Lafayette, In","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061694501","display_name":"Elisa Bertino","orcid":"https://orcid.org/0000-0002-4029-7051"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Elisa Bertino","raw_affiliation_strings":["Purdue University, Lafayette, IN","Purdue University, Lafayette, In"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, Lafayette, IN","institution_ids":[]},{"raw_affiliation_string":"Purdue University, Lafayette, In","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105652031","display_name":"Jorge Lobo","orcid":"https://orcid.org/0000-0002-9438-0926"},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jorge Lobo","raw_affiliation_strings":["IBM T. J. Watson, Hawthorne, NY","IBM T.J. Watson, Hawthorne, NY#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T. J. Watson, Hawthorne, NY","institution_ids":["https://openalex.org/I1341412227"]},{"raw_affiliation_string":"IBM T.J. Watson, Hawthorne, NY#TAB#","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045287142","display_name":"Carolyn Brodie","orcid":null},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carolyn Brodie","raw_affiliation_strings":["IBM T. J. Watson, Hawthorne, NY","IBM T.J. Watson, Hawthorne, NY#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T. J. Watson, Hawthorne, NY","institution_ids":["https://openalex.org/I1341412227"]},{"raw_affiliation_string":"IBM T.J. Watson, Hawthorne, NY#TAB#","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110785971","display_name":"Clare-Marie\ufeff Karat","orcid":null},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Clare-Marie Karat","raw_affiliation_strings":["IBM T. J. Watson, Hawthorne, NY","IBM T.J. Watson, Hawthorne, NY#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T. J. Watson, Hawthorne, NY","institution_ids":["https://openalex.org/I1341412227"]},{"raw_affiliation_string":"IBM T.J. Watson, Hawthorne, NY#TAB#","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049687650","display_name":"John Karat","orcid":null},"institutions":[{"id":"https://openalex.org/I1341412227","display_name":"IBM (United States)","ror":"https://ror.org/05hh8d621","country_code":"US","type":"company","lineage":["https://openalex.org/I1341412227"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Karat","raw_affiliation_strings":["IBM T. J. Watson, Hawthorne, NY","IBM T.J. Watson, Hawthorne, NY#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T. J. Watson, Hawthorne, NY","institution_ids":["https://openalex.org/I1341412227"]},{"raw_affiliation_string":"IBM T.J. Watson, Hawthorne, NY#TAB#","institution_ids":["https://openalex.org/I1341412227"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108079313","display_name":"Alberto Trombeta","orcid":null},"institutions":[{"id":"https://openalex.org/I115752224","display_name":"University of Insubria","ror":"https://ror.org/00s409261","country_code":"IT","type":"education","lineage":["https://openalex.org/I115752224"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alberto Trombeta","raw_affiliation_strings":["Insubria University, Varese, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Insubria University, Varese, Italy","institution_ids":["https://openalex.org/I115752224"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":70.269,"has_fulltext":false,"cited_by_count":218,"citation_normalized_percentile":{"value":0.99914639,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"13","issue":"3","first_page":"1","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8865237236022949},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.8723174333572388},{"id":"https://openalex.org/keywords/xacml","display_name":"XACML","score":0.8069906234741211},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.7726526260375977},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.6705107092857361},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5203951597213745},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.45782148838043213},{"id":"https://openalex.org/keywords/privacy-software","display_name":"Privacy software","score":0.45733481645584106},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.377651184797287}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8865237236022949},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.8723174333572388},{"id":"https://openalex.org/C2779886121","wikidata":"https://www.wikidata.org/wiki/Q288682","display_name":"XACML","level":3,"score":0.8069906234741211},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7726526260375977},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.6705107092857361},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5203951597213745},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.45782148838043213},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.45733481645584106},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.377651184797287},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1145/1805974.1805980","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1805974.1805980","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},{"id":"pmh:oai:docs.lib.purdue.edu:ccpubs-1133","is_oa":false,"landing_page_url":"https://docs.lib.purdue.edu/ccpubs/123","pdf_url":null,"source":{"id":"https://openalex.org/S4377196310","display_name":"Purdue e-Pubs (Purdue University System)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2801333002","host_organization_name":"Purdue University System","host_organization_lineage":["https://openalex.org/I2801333002"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cyber Center Publications","raw_type":"text"},{"id":"pmh:oai:docs.lib.purdue.edu:dissertations-9859","is_oa":false,"landing_page_url":"https://docs.lib.purdue.edu/dissertations/AAI3413989","pdf_url":null,"source":{"id":"https://openalex.org/S4377196310","display_name":"Purdue e-Pubs (Purdue University System)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2801333002","host_organization_name":"Purdue University System","host_organization_lineage":["https://openalex.org/I2801333002"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Theses and Dissertations Available from ProQuest","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.92.566","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.92.566","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://projects.cerias.purdue.edu/ocrproj/files/p41-ni.pdf","raw_type":"text"},{"id":"pmh:oai:irinsubria.uninsubria.it:11383/9543","is_oa":false,"landing_page_url":"http://hdl.handle.net/11383/9543","pdf_url":null,"source":{"id":"https://openalex.org/S4377196351","display_name":"IrInSubria (University of Insubria)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I115752224","host_organization_name":"University of Insubria","host_organization_lineage":["https://openalex.org/I115752224"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6499999761581421,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G3560589431","display_name":null,"funder_award_id":"712846","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W15769136","https://openalex.org/W107524893","https://openalex.org/W1534217561","https://openalex.org/W1550810009","https://openalex.org/W1554379389","https://openalex.org/W1948417575","https://openalex.org/W1967221886","https://openalex.org/W1988443617","https://openalex.org/W1996838830","https://openalex.org/W2004851692","https://openalex.org/W2011462679","https://openalex.org/W2030123881","https://openalex.org/W2068189899","https://openalex.org/W2092047229","https://openalex.org/W2100719963","https://openalex.org/W2119760285","https://openalex.org/W2146007384","https://openalex.org/W2154765153","https://openalex.org/W2166602595","https://openalex.org/W2475899349","https://openalex.org/W2559574904","https://openalex.org/W3108602244","https://openalex.org/W3141199462","https://openalex.org/W4206109200"],"related_works":["https://openalex.org/W2373984226","https://openalex.org/W2349137515","https://openalex.org/W2374393728","https://openalex.org/W2612447197","https://openalex.org/W2124367090","https://openalex.org/W1920330819","https://openalex.org/W2475594486","https://openalex.org/W2298912813","https://openalex.org/W2809549939","https://openalex.org/W2139115530"],"abstract_inverted_index":{"In":[0,140],"this":[1],"article,":[2,142],"we":[3,143],"introduce":[4],"a":[5,9,16,41,98],"comprehensive":[6],"framework":[7,39,95],"supporting":[8,110],"privacy-aware":[10,78],"access":[11,21,156],"control":[12,22,157],"mechanism,":[13],"that":[14,46],"is,":[15],"mechanism":[17],"tailored":[18],"to":[19,23,54,130],"enforce":[20],"data":[24],"containing":[25],"personally":[26],"identifiable":[27],"information":[28],"and,":[29],"as":[30,163],"such,":[31],"privacy":[32,159],"sensitive.":[33],"The":[34,94],"key":[35],"component":[36],"of":[37,43,77,83,106,114,121],"the":[38,48,75,81,104,107,111,119,141],"is":[40,128],"family":[42],"models":[44],"(P-RBAC)":[45],"extend":[47],"well-known":[49],"RBAC":[50],"model":[51],"in":[52,87],"order":[53],"provide":[55],"full":[56],"support":[57],"for":[58,124],"expressing":[59],"highly":[60],"complex":[61],"privacy-related":[62],"policies,":[63],"taking":[64],"into":[65],"account":[66],"features":[67],"like":[68],"purposes":[69],"and":[70,80,127,149,158,166],"obligations.":[71],"We":[72],"formally":[73],"define":[74],"notion":[76,82],"permissions":[79,134],"conflicting":[84],"permission":[85],"assignments":[86],"P-RBAC,":[88],"together":[89],"with":[90,153],"efficient":[91],"conflict-checking":[92],"algorithms.":[93],"also":[96,144],"includes":[97],"flexible":[99],"authoring":[100,125],"tool,":[101],"based":[102],"on":[103],"use":[105,120],"SPARCLE":[108,117],"system,":[109],"high-level":[112],"specification":[113],"P-RBAC":[115,133],"permissions.":[116],"supports":[118],"natural":[122,137],"language":[123,138],"policies":[126],"able":[129],"automatically":[131],"generate":[132],"from":[135],"these":[136],"specifications.":[139],"report":[145],"performance":[146],"evaluation":[147],"results":[148],"contrast":[150],"our":[151],"approach":[152],"other":[154],"relevant":[155],"policy":[160],"frameworks":[161],"such":[162],"P3P,":[164],"EPAL,":[165],"XACML.":[167]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":9},{"year":2019,"cited_by_count":16},{"year":2018,"cited_by_count":17},{"year":2017,"cited_by_count":21},{"year":2016,"cited_by_count":15},{"year":2015,"cited_by_count":24},{"year":2014,"cited_by_count":17},{"year":2013,"cited_by_count":16},{"year":2012,"cited_by_count":25}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}