{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,4]],"date-time":"2026-11-04T20:10:06Z","timestamp":1793823006556,"version":"4.6.1"},"publisher-location":"Berlin, Heidelberg","reference-count":31,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642315398","type":"print"},{"value":"9783642315404","type":"electronic"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-31540-4_4","type":"book-chapter","created":{"date-parts":[[2012,6,25]],"date-time":"2012-06-25T09:18:03Z","timestamp":1340615883000},"page":"41-55","source":"Crossref","is-referenced-by-count":270,"title":["A Unified Attribute-Based Access Control Model Covering DAC, MAC and RBAC"],"prefix":"10.1007","author":[{"given":"Xin","family":"Jin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ram","family":"Krishnan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ravi","family":"Sandhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"4_CR1","unstructured":"OASIS, Extensible access control markup language (XACML), v2.0 (2005)"},{"key":"4_CR2","unstructured":"OASIS, Security assertion markup language (SAML), v2.0 (2005)"},{"key":"4_CR3","unstructured":"Abdallah, A.E., Khayat, E.J.: A formal model for parameterized role-based access control. In: Formal Aspects in Security and Trust (2004)"},{"key":"4_CR4","unstructured":"Al-Kahtani, M.A., Sandhu, R.S.: A model for attribute-based user-role assignment. In: ACSAC (2002)"},{"key":"4_CR5","doi-asserted-by":"crossref","unstructured":"Bertino, E., Catania, B., Ferrari, E., Perlasca, P.: A logical framework for reasoning about access control models. In: SACMAT (2001)","DOI":"10.1145\/373256.373261"},{"key":"4_CR6","doi-asserted-by":"crossref","unstructured":"Bonatti, P.A., Samarati, P.: Regulating service access and information release on the web. In: ACM CCS (2000)","DOI":"10.1145\/352600.352620"},{"key":"4_CR7","doi-asserted-by":"crossref","unstructured":"Bonatti, P.A., Samarati, P.: A uniform framework for regulating service access and information release on the web. J. Comp. Secur. (2002)","DOI":"10.3233\/JCS-2002-10303"},{"key":"4_CR8","doi-asserted-by":"crossref","unstructured":"Chadwick, D.W., Otenko, A., Ball, E.: Role-based access control with X.509 attribute certificates. IEEE Internet Computing (2003)","DOI":"10.1109\/MIC.2003.1189190"},{"key":"4_CR9","unstructured":"Damiani, E., di Vimercati, S.D.C., Samarati, P.: New paradigms for access control in open environments. In: Int. Sym. on Sig. Proc. and Info. Tech. (2005)"},{"key":"4_CR10","doi-asserted-by":"crossref","unstructured":"Evered, M.: Supporting parameterised roles with object-based access control. In: HICSS (2003)","DOI":"10.1109\/HICSS.2003.1174463"},{"key":"4_CR11","doi-asserted-by":"crossref","unstructured":"Ferraiolo, D.F., Sandhu, R., Gavrila, S., Richard Kuhn, D., Chandramouli, R.: Proposed nist standard for role-based access control. ACM Trans. Inf. Syst. Secur. (2001)","DOI":"10.1145\/501978.501980"},{"key":"4_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"173","DOI":"10.1007\/978-3-642-03013-0_9","volume-title":"ECOOP 2009 \u2013 Object-Oriented Programming","author":"J. Fischer","year":"2009","unstructured":"Fischer, J., Marino, D., Majumdar, R., Millstein, T.: Fine-Grained Access Control with Object-Sensitive Roles. In: Drossopoulou, S. (ed.) ECOOP 2009. LNCS, vol.\u00a05653, pp. 173\u2013194. Springer, Heidelberg (2009)"},{"key":"4_CR13","doi-asserted-by":"crossref","unstructured":"Fuchs, L., Pernul, G., Sandhu, R.: Roles in information security: A survey and classification of the research area. Comp. and Secur. (2011)","DOI":"10.1016\/j.cose.2011.08.002"},{"key":"4_CR14","unstructured":"Ge, M., Osborn, S.L.: A design for parameterized roles. In: DBSec (2004)"},{"key":"4_CR15","doi-asserted-by":"crossref","unstructured":"Giuri, L., Iglio, P.: Role templates for content-based access control. In: ACM Workshop on RBAC (1997)","DOI":"10.1145\/266741.266773"},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"Jajodia, S., Samarati, P., Sapino, M.L., Subrahmanian, V.S.: Flexible support for multiple access control policies. ACM Trans. Database Syst. (2001)","DOI":"10.1145\/383891.383894"},{"key":"4_CR17","unstructured":"El Kalam, A.A., Benferhat, S., Mi\u00e8ge, A., El Baida, R., Cuppens, F., Saurel, C., Balbiani, P., Deswarte, Y., Trouessin, G.: Organization based access control. In: POLICY (2003)"},{"key":"4_CR18","doi-asserted-by":"crossref","unstructured":"Kandala, S., Sandhu, R., Bhamidipati, V.: An attribute based framework for risk-adaptive access control models. In: ARES (2011)","DOI":"10.1109\/ARES.2011.41"},{"key":"4_CR19","doi-asserted-by":"crossref","unstructured":"Lang, B., Foster, I.T., Siebenlist, F., Ananthakrishnan, R., Freeman, T.: A flexible attribute based access control method for grid computing. J. Grid Comput. (2009)","DOI":"10.1007\/s10723-008-9112-1"},{"key":"4_CR20","unstructured":"Li, N., Mitchell, J.C., Winsborough, W.H.: Design of a role-based trust management framework. In: 2002 IEEE S&P (2002)"},{"key":"4_CR21","doi-asserted-by":"crossref","unstructured":"Park, J., Sandhu, R.: The UCONabc usage control model. ACM Trans. Inf. Syst. Secur. (2004)","DOI":"10.1145\/984334.984339"},{"key":"4_CR22","doi-asserted-by":"crossref","unstructured":"Sandhu, R.S.: Lattice-based access control models. IEEE Computer (1993)","DOI":"10.1109\/2.241422"},{"key":"4_CR23","doi-asserted-by":"crossref","unstructured":"Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. IEEE Computer (1996)","DOI":"10.1109\/2.485845"},{"key":"4_CR24","doi-asserted-by":"crossref","unstructured":"Sandhu, R.S., Samarati, P.: Access control: Principles and practice. IEEE Com. Mag. (1994)","DOI":"10.1109\/35.312842"},{"key":"4_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"132","DOI":"10.1007\/11823865_14","volume-title":"E-Commerce and Web Technologies","author":"C. Schl\u00e4ger","year":"2006","unstructured":"Schl\u00e4ger, C., Sojer, M., Muschall, B., Pernul, G.: Attribute-Based Authentication and Authorisation Infrastructures for E-Commerce Providers. In: Bauknecht, K., Pr\u00f6ll, B., Werthner, H. (eds.) EC-Web 2006. LNCS, vol.\u00a04082, pp. 132\u2013141. Springer, Heidelberg (2006)"},{"key":"4_CR26","doi-asserted-by":"crossref","unstructured":"Wang, L., Wijesekera, D., Jajodia, S.: A logic-based framework for attribute based access control. In: 2nd ACM Workshop on FMSE (2004)","DOI":"10.1145\/1029133.1029140"},{"key":"4_CR27","unstructured":"Yong, J., Bertino, E., Toleman, M., Roberts, D.: Extended RBAC with role attributes. In: 10th Pacific Asia Conf. on Info. Sys. (2006)"},{"key":"4_CR28","doi-asserted-by":"crossref","unstructured":"Yu, T., Ma, X., Winslett, M.: Prunes: an efficient and complete strategy for automated trust negotiation over the internet. In: ACM CCS (2000)","DOI":"10.1145\/352600.352633"},{"key":"4_CR29","doi-asserted-by":"crossref","unstructured":"Yu, T., Winslett, M., Seamons, K.E.: Interoperable strategies in automated trust negotiation. In: ACM CCS (2001)","DOI":"10.1145\/501983.502004"},{"key":"4_CR30","doi-asserted-by":"crossref","unstructured":"Yu, T., Winslett, M., Seamons, K.E.: Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Trans. Inf. Syst. Secur. (2003)","DOI":"10.1145\/605434.605435"},{"key":"4_CR31","doi-asserted-by":"crossref","unstructured":"Yuan, E., Tong, J.: Attributed based access control (ABAC) for web services. In: Intl. ICWS (2005)","DOI":"10.1109\/ICWS.2005.25"}],"container-title":["Lecture Notes in Computer Science","Data and Applications Security and Privacy XXVI"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-31540-4_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,3]],"date-time":"2019-05-03T09:22:26Z","timestamp":1556875346000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-31540-4_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642315398","9783642315404"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-31540-4_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012]]}}}