Abstract
M-commerce have grown rapidly, it is very important to determine whether an identity is permitted to access a resource in mobile environments. In this paper we propose ET-RBAC based Wireless Privilege Management Infrastructure(WPMI) model and Wireless Attribute Certificate(WAC) for authorization in mobile communication. All access control decisions are driven by an authorization policy, which is itself stored in an WAC. Authorization policies are written in XML according to a DTD that has been published at XML.org. Finally we show the effectiveness of the proposed ET-RBAC by applying it to an example of M-commerce service.
This work is supported in part by the Ministry of Information & Communication of Korea and in pary by Institute for Industrial Technology of Soonchunhyang University
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Arsenault, A., Turner, S.: Internet X.509 Public Key Infrastructure PKIX Roadmap Work in Progress. Internet-draft (March 05 2000), http://www.ietf.org/internet-drafts/draft-ietf-pkix-roadmap-05.txt
Adams, C., Lloyd, S.: Understanding Public-Key Infrastructure: Concepts, Standards and Deployment ConsiderationsÃÃ. Macmillan Technical Publishing, Basingstoke (1999)
Rec, I.T.U.-T.: X.509 2000 |ISO/IEC 9594-8 The Directory: Authentication Framework
Housley, R., Ford, W., Polk, T., Solo, D.: Internet X.509 Public Key Infrastructure Certificate and CRL Profile. RFC 2459, IETF PKIX Working Group (January 1999), http://www.ietf.org/rfc/rfc2459.txt
Aresenault, A., Tuner, S.: Internet X.509 Public Key Infrastructure, Internet Draft (November 2000)
Lee, J.I., Park, J.H., Song, J.S.: Domestic PKI model for WAP. Institute of Information Security & Cryptology Journal (October 2000)
Wireless Application Protocol Wireless Transport Layer Security, WAP Forum (April 6 2001)
Jin, S.H., Choi, D.S., Cho, Y.S., Yoon, E.J.: Attribute Authentication technology & PMI. Institute of Information Security & Cryptology Journal (December 2000)
Farrell, S., Housley, R.: An Internet Attribute Certificate Profile for Authorization, Internet Draft (June 2001)
Farrell, S., Housley, R.: An Internet Attribute Certificate Profile for Authorization, RFC 3281 (April 2002), available on line at http://www.ietf.org/rfc/rfc3281.txt
ISO/IEC 9594-8/ITU-T Recommendation X.509, Information Technology-Open System Interconnection: The Directory: Authentication Framework (2002)
Park, D.G., Hwang, Y.D.: RBAC in Distributed Retrieving Systems by Attribute Certificates. In: IC 2001 (2001)
Knight, S., Grandy, C.: Scalability Issues in PMI Delegation. In: 1st Annual PKI Research Workshop-proceedings (April 2002)
Park, J.S., Sandhu, R.: Binding Identities and Attributes Using Digitally Signed Certificates. In: ACSAC 2000 (2000)
Chadwick, D.W., Otenko, O.: The PERMIS X.509 Role based Privilege Management Infrastructure. In: SACMAT 2002 (2002)
Chadwick, D.W., Otenko, A.: RBAC Polices in XML for X.509 based Privilege Management. In: Sec 2000 (2000)
Chadwick, D.W.: Privilege Management Infrastructure. Business Briefing: Global Security Systems Reference Section
Park, D.G., Lee, Y.R.: The PMI model for the wireless environment. In: KOCIES Conference 2002 (2002)
Nykanen, T.: Attribute Certificate in X.509. In: HUT TML 2000, Tik-110.501 Seminar on Network Security (2000)
Park, D.G., Hwang, Y.D.: A Extended Task-Role-Based access control model for access control enforcement in Enterprise Environments. In: EALPIIT 2002 (2002)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2003 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Park, DG., Lee, YR. (2003). The ET-RBAC Based Privilege Management Infrastructure for Wireless Networks. In: Bauknecht, K., Tjoa, A.M., Quirchmayr, G. (eds) E-Commerce and Web Technologies. EC-Web 2003. Lecture Notes in Computer Science, vol 2738. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-45229-4_9
Download citation
DOI: https://doi.org/10.1007/978-3-540-45229-4_9
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-40808-6
Online ISBN: 978-3-540-45229-4
eBook Packages: Springer Book Archive