{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,3]],"date-time":"2026-09-03T15:13:31Z","timestamp":1788448411452,"version":"build-2803163510"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319116976","type":"print"},{"value":"9783319116983","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-11698-3_5","type":"book-chapter","created":{"date-parts":[[2014,10,9]],"date-time":"2014-10-09T05:18:13Z","timestamp":1412831893000},"page":"54-69","source":"Crossref","is-referenced-by-count":24,"title":["Extending OpenStack Access Control with Domain Trust"],"prefix":"10.1007","author":[{"given":"Bo","family":"Tang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ravi","family":"Sandhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"5_CR1","unstructured":"DevOps, http:\/\/en.wikipedia.org\/wiki\/DevOps"},{"key":"5_CR2","unstructured":"Devstack, http:\/\/www.devstack.org"},{"key":"5_CR3","unstructured":"Microsoft windows active directory, http:\/\/en.wikipedia.org\/wiki\/Active_Directory"},{"key":"5_CR4","unstructured":"OpenStack Havana Release, http:\/\/www.openstack.org\/software\/havana"},{"key":"5_CR5","unstructured":"Openstack identity service api v3 (stable), http:\/\/developer.openstack.org\/api-ref-identity-v3.html"},{"issue":"4","key":"5_CR6","doi-asserted-by":"publisher","first-page":"549","DOI":"10.1016\/j.future.2004.10.006","volume":"21","author":"R. Alfieri","year":"2005","unstructured":"Alfieri, R., Cecchini, R., et al.: From gridmap-file to VOMS: managing authorization in a grid environment. Future Generation Computer Systems\u00a021(4), 549\u2013558 (2005)","journal-title":"Future Generation Computer Systems"},{"key":"5_CR7","doi-asserted-by":"crossref","unstructured":"Baracaldo, N., Masoumzadeh, A., Joshi, J.: A secure, constraint-aware role-based access control interoperation framework. In: Proc. of the 5th International Conference on Network and System Security (NSS), pp. 200\u2013207. IEEE (2011)","DOI":"10.1109\/ICNSS.2011.6060001"},{"key":"5_CR8","unstructured":"Barka, E., Sandhu, R.: Framework for role-based delegation models. In: Proc. of the Annual Conf. on Comp. Sec. Applications (ACSAC), pp. 168\u2013176. IEEE (2000)"},{"key":"5_CR9","unstructured":"Blaze, M., Feigenbaum, J., Lacy, J.: Decentralized trust management. In: Proc. of the 1996 IEEE Symp. on Security and Privacy, pp. 164\u2013173. IEEE (1996)"},{"key":"5_CR10","doi-asserted-by":"crossref","unstructured":"Calero, J.M.A., Edwards, N., et al.: Toward a multi-tenancy authorization system for cloud services. IEEE Security & Privacy, 48\u201355 (November\/December 2010)","DOI":"10.1109\/MSP.2010.194"},{"key":"5_CR11","doi-asserted-by":"crossref","unstructured":"Chadwick, D.W., Otenko, A.: The PERMIS X. 509 role based privilege management infrastructure, vol.\u00a019, pp. 277\u2013289. Elsevier (2003)","DOI":"10.1016\/S0167-739X(02)00153-X"},{"issue":"3","key":"5_CR12","doi-asserted-by":"publisher","first-page":"224","DOI":"10.1145\/501978.501980","volume":"4","author":"D.F. Ferraiolo","year":"2001","unstructured":"Ferraiolo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.R., Chandramouli, R.: Proposed NIST standard for role-based access control. TISSEC\u00a04(3), 224\u2013274 (2001)","journal-title":"TISSEC"},{"key":"5_CR13","doi-asserted-by":"crossref","unstructured":"Freudenthal, E., Pesin, T., et al.: dRBAC: distributed role-based access control for dynamic coalition environments. In: Proc. of ICDCS, pp. 411\u2013420. IEEE (2002)","DOI":"10.21236\/ADA440599"},{"key":"5_CR14","unstructured":"Li, N., Mitchell, J.C., et al.: Design of a role-based trust-management framework. In: Proc. of IEEE Symp. on Sec. and Privacy, pp. 114\u2013130. IEEE (2002)"},{"issue":"5","key":"5_CR15","doi-asserted-by":"publisher","first-page":"260","DOI":"10.1016\/j.cose.2008.12.004","volume":"28","author":"Q. Li","year":"2009","unstructured":"Li, Q., Zhang, X., Xu, M., Wu, J.: Towards secure dynamic collaborations with group-based RBAC model. Computers & Security\u00a028(5), 260\u2013275 (2009)","journal-title":"Computers & Security"},{"key":"5_CR16","doi-asserted-by":"crossref","unstructured":"Pearlman, L., Welch, V., Foster, I., et al.: A community authorization service for group collaboration. In: Proc. of Intl. POLICY, pp. 50\u201359. IEEE (2002)","DOI":"10.1109\/POLICY.2002.1011293"},{"key":"5_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"242","DOI":"10.1007\/978-3-642-39256-6_16","volume-title":"Data and Applications Security and Privacy XXVII","author":"I. Ray","year":"2013","unstructured":"Ray, I., Mulamba, D., Ray, I., Han, K.J.: A model for trust-based access control and delegation in mobile clouds. In: Wang, L., Shafiq, B. (eds.) DBSec 2013. LNCS, vol.\u00a07964, pp. 242\u2013257. Springer, Heidelberg (2013)"},{"issue":"11","key":"5_CR18","doi-asserted-by":"publisher","first-page":"1557","DOI":"10.1109\/TKDE.2005.185","volume":"17","author":"B. Shafiq","year":"2005","unstructured":"Shafiq, B., Joshi, J.B., Bertino, E., Ghafoor, A.: Secure interoperation in a multidomain environment employing RBAC policies. IEEE Transactions on Knowledge and Data Engineering\u00a017(11), 1557\u20131577 (2005)","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"5_CR19","doi-asserted-by":"crossref","unstructured":"Shehab, M., Bertino, E., Ghafoor, A.: SERAT: SEcure role mApping technique for decentralized secure interoperability. In: Proc. of SACMAT, pp. 159\u2013167 (2005)","DOI":"10.1145\/1063979.1064007"},{"key":"5_CR20","doi-asserted-by":"crossref","unstructured":"Tang, B., Li, Q., Sandhu, R.: A multi-tenant RBAC model for collaborative cloud services. In: Proc. of IEEE Conf. on Privacy, Security and Trust, PST (2013)","DOI":"10.1109\/PST.2013.6596058"},{"key":"5_CR21","doi-asserted-by":"crossref","unstructured":"Tang, B., Sandhu, R.: Cross-tenant trust models in cloud computing. In: Proc. of IEEE Conf. on Information Reuse and Integration, IRI (2013)","DOI":"10.1109\/IRI.2013.6642463"},{"key":"5_CR22","doi-asserted-by":"crossref","unstructured":"Tang, B., Sandhu, R., Li, Q.: Multi-tenancy authorization models for collaborative cloud services. In: Proc. of Intl. Conf. on Collab. Tech. and Sys., CTS (2013)","DOI":"10.1109\/CTS.2013.6567218"},{"key":"5_CR23","doi-asserted-by":"crossref","unstructured":"Zhang, X., Oh, S., Sandhu, R.: PBDM: a flexible delegation model in RBAC. In: Proc. of SACMAT, pp. 149\u2013157. ACM (2003)","DOI":"10.1145\/775427.775431"},{"key":"5_CR24","doi-asserted-by":"crossref","unstructured":"Zhang, Z., Zhang, X., Sandhu, R.: ROBAC: Scalable role and organization based access control models. In: Proc. of CollaborateCom, pp. 1\u20139. IEEE (2006)","DOI":"10.1109\/COLCOM.2006.361879"}],"container-title":["Lecture Notes in Computer Science","Network and System Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-11698-3_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,5]],"date-time":"2025-05-05T02:37:23Z","timestamp":1746412643000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-11698-3_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319116976","9783319116983"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-11698-3_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014]]}}}