{"id":"https://openalex.org/W2003748004","doi":"https://doi.org/10.1145/1952982.1952985","title":"Authorization recycling in hierarchical RBAC systems","display_name":"Authorization recycling in hierarchical RBAC systems","publication_year":2011,"publication_date":"2011-05-01","ids":{"openalex":"https://openalex.org/W2003748004","doi":"https://doi.org/10.1145/1952982.1952985","mag":"2003748004"},"language":"en","primary_location":{"id":"doi:10.1145/1952982.1952985","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1952982.1952985","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101913363","display_name":"Qiang Wei","orcid":"https://orcid.org/0000-0002-0288-0086"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qiang Wei","raw_affiliation_strings":["CCB International (Holdings) Ltd., Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CCB International (Holdings) Ltd., Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109050799","display_name":"Jason Crampton","orcid":"https://orcid.org/0000-0003-2151-8426"},"institutions":[{"id":"https://openalex.org/I184558857","display_name":"Royal Holloway University of London","ror":"https://ror.org/04g2vpn86","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I184558857"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jason Crampton","raw_affiliation_strings":["Royal Holloway, University of London, U.K","Royal Holloway, University of London, U. K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Royal Holloway, University of London, U.K","institution_ids":["https://openalex.org/I184558857"]},{"raw_affiliation_string":"Royal Holloway, University of London, U. K","institution_ids":["https://openalex.org/I184558857"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035380853","display_name":"Konstantin Beznosov","orcid":"https://orcid.org/0000-0002-1327-7477"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Konstantin Beznosov","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088755273","display_name":"Matei Ripeanu","orcid":"https://orcid.org/0000-0001-9839-3866"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Matei Ripeanu","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.4752,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.95942773,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"14","issue":"1","first_page":"1","last_page":"29"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10742","display_name":"Peer-to-Peer Network Technologies","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8526360392570496},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.7480441331863403},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.6984224319458008},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6504937410354614},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.6092172265052795},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.5833257436752319},{"id":"https://openalex.org/keywords/single-point-of-failure","display_name":"Single point of failure","score":0.5621218085289001},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.46460288763046265},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4365732669830322},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32721930742263794},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.167687326669693}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8526360392570496},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.7480441331863403},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.6984224319458008},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6504937410354614},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.6092172265052795},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.5833257436752319},{"id":"https://openalex.org/C165136773","wikidata":"https://www.wikidata.org/wiki/Q1363179","display_name":"Single point of failure","level":2,"score":0.5621218085289001},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.46460288763046265},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4365732669830322},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32721930742263794},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.167687326669693},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/1952982.1952985","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1952982.1952985","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.221.5009","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.221.5009","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.isg.rhul.ac.uk/%7Ejason/Pubs/a3-wei.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.661.6331","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.661.6331","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://lersse-dl.ece.ubc.ca/record/224/files/224.pdf?version%3D1","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6600000262260437,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G4942817654","display_name":null,"funder_award_id":"STPGP 322192-05","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"}],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W26022429","https://openalex.org/W1500893261","https://openalex.org/W1579338639","https://openalex.org/W1607013197","https://openalex.org/W1821730155","https://openalex.org/W1972964448","https://openalex.org/W1973954799","https://openalex.org/W2002604183","https://openalex.org/W2005533972","https://openalex.org/W2007780422","https://openalex.org/W2022985851","https://openalex.org/W2043226436","https://openalex.org/W2065076704","https://openalex.org/W2067583486","https://openalex.org/W2095881341","https://openalex.org/W2100110858","https://openalex.org/W2107801860","https://openalex.org/W2109310851","https://openalex.org/W2112053513","https://openalex.org/W2135273046","https://openalex.org/W2136021491","https://openalex.org/W2138798600","https://openalex.org/W2139287545","https://openalex.org/W2145793726","https://openalex.org/W2146223937","https://openalex.org/W2151636832","https://openalex.org/W2162022335","https://openalex.org/W2166602595","https://openalex.org/W2167911131","https://openalex.org/W2169528242","https://openalex.org/W2171745815","https://openalex.org/W2341516670","https://openalex.org/W2561675875","https://openalex.org/W3102845218","https://openalex.org/W4285719527","https://openalex.org/W6681654339"],"related_works":["https://openalex.org/W2372156812","https://openalex.org/W2374393728","https://openalex.org/W2555738791","https://openalex.org/W1990260561","https://openalex.org/W1593822213","https://openalex.org/W2357728851","https://openalex.org/W2017675414","https://openalex.org/W2367441718","https://openalex.org/W2355345331","https://openalex.org/W1466567525"],"abstract_inverted_index":{"As":[0],"distributed":[1],"applications":[2],"increase":[3],"in":[4,65],"size":[5],"and":[6,30,58,78,90,104],"complexity,":[7],"traditional":[8],"authorization":[9,15,42,63,80,88,113],"architectures":[10],"based":[11],"on":[12],"a":[13,25,31,105],"dedicated":[14],"server":[16,89],"become":[17],"increasingly":[18],"fragile":[19],"because":[20],"this":[21],"decision":[22],"point":[23,27],"represents":[24],"single":[26],"of":[28,40,86,119],"failure":[29],"performance":[32,118],"bottleneck.":[33],"Authorization":[34],"caching,":[35],"which":[36],"enables":[37],"the":[38,60,87,117],"reuse":[39],"previous":[41],"decisions,":[43,81],"is":[44],"one":[45],"technique":[46],"that":[47,71,112],"has":[48],"been":[49],"used":[50],"to":[51],"address":[52],"these":[53,73,96],"challenges.":[54],"This":[55],"article":[56],"introduces":[57],"evaluates":[59],"mechanisms":[61,74],"for":[62],"\u201crecycling\u201d":[64],"RBAC":[66],"enterprise":[67],"systems.":[68],"The":[69],"algorithms":[70,97],"support":[72],"allow":[75],"making":[76],"precise":[77],"approximate":[79],"thereby":[82],"masking":[83],"possible":[84],"failures":[85],"reducing":[91],"its":[92],"load.":[93],"We":[94],"evaluate":[95],"analytically":[98],"as":[99,101],"well":[100],"using":[102],"simulation":[103],"prototype":[106],"implementation.":[107],"Our":[108],"evaluation":[109],"results":[110],"demonstrate":[111],"recycling":[114],"can":[115],"improve":[116],"distributed-access":[120],"control":[121],"mechanisms.":[122]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":2}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}