GEO-RBAC Model

Synonyms

LoT-RBAC

Definition

The central idea of the GEO-RBAC model is the role schema, and instances of roles, as defined below [1]:

• Role Schema: A Role Schema is a tuple <r, ext, loc, m_loc>, where r is the name of the role, ext is the feature type of the role extent, loc is the feature type of the logical positions and mloc is the mapping function that maps a real position into a logical position of type loc.

• Role Instance: Given a role schema r_s, an instance r_iof r_sis a pair <r, e> where$r = {r}_s\cdot r$and e ∈ F, such that FT_Type(e)$={r}_s\cdot ext$.

The notion of permissions, users, sessions, permission-role assignment and user-role assignment in the GEO-RBAC are similar to those in the RBAC model. The role enabling status in GEO-RBAC depends on whether the user’s physical location maps to the logical location specified in the role schema, as defined below:

• Enabled Roles: Enabled session roles are defined as the function: EnabledSessionRoles: \( SES\times RPOS\to...