{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,4]],"date-time":"2024-09-04T14:34:02Z","timestamp":1725460442978},"publisher-location":"Berlin, Heidelberg","reference-count":15,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642380327"},{"type":"electronic","value":"9783642380334"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-3-642-38033-4_17","type":"book-chapter","created":{"date-parts":[[2013,5,6]],"date-time":"2013-05-06T20:51:00Z","timestamp":1367873460000},"page":"233-247","source":"Crossref","is-referenced-by-count":0,"title":["Expressing User Access Authorization Exceptions in Conventional Role-Based Access Control"],"prefix":"10.1007","author":[{"given":"Xiaofan","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Natasha","family":"Alechina","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Brian","family":"Logan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"unstructured":"Abiteboul, S., Hull, R., Vianu, V.: Foundations of Databases. Addison-Wesley (November 1994)","key":"17_CR1"},{"key":"17_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/3-540-44569-2_7","volume-title":"Policies for Distributed Systems and Networks","author":"J.. Bacon","year":"2001","unstructured":"Bacon, J., Lloyd, M., Moody, K.: Translating role-based access control policy within context. In: Sloman, M., Lobo, J., Lupu, E.C. (eds.) POLICY 2001. LNCS, vol.\u00a01995, pp. 107\u2013119. Springer, Heidelberg (2001)"},{"issue":"4","key":"17_CR3","doi-asserted-by":"publisher","first-page":"492","DOI":"10.1145\/581271.581276","volume":"5","author":"J. Bacon","year":"2002","unstructured":"Bacon, J., Moody, K., Yao, W.: A model of OASIS role-based access control and its support for active security. ACM Transactions on Information and System Security\u00a05(4), 492\u2013540 (2002)","journal-title":"ACM Transactions on Information and System Security"},{"issue":"1","key":"17_CR4","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1145\/605434.605437","volume":"6","author":"E. Bertino","year":"2003","unstructured":"Bertino, E., Catania, B., Ferrari, E., Perlasca, P.: A logical framework for reasoning about access control models. ACM Transactions on Information and System Security\u00a06(1), 71\u2013127 (2003)","journal-title":"ACM Transactions on Information and System Security"},{"unstructured":"HL7 Security\u00a0Technical Committee. Role Based Access Control (RBAC) Healthcare Permission Catalog. HL7 Security Technical Committee (January 2010)","key":"17_CR5"},{"doi-asserted-by":"crossref","unstructured":"Crampton, J.: On permissions, inheritance and role hierarchies. In: Proceedings of the 10th ACM Conference on Computer and Communications Security, pp. 85\u201392 (2003)","key":"17_CR6","DOI":"10.1145\/948109.948123"},{"key":"17_CR7","doi-asserted-by":"publisher","first-page":"224","DOI":"10.1145\/501978.501980","volume":"4","author":"D.F. Ferraiolo","year":"2001","unstructured":"Ferraiolo, D.F., Sandhu, R.S., Gavrila, S.I., Kuhn, D.R., Chandramouli, R.: Proposed NIST standard for role-based access control. ACM Transactions on Information and System Security\u00a04, 224\u2013274 (2001)","journal-title":"ACM Transactions on Information and System Security"},{"doi-asserted-by":"crossref","unstructured":"Goh, C., Baldwin, A.: Towards a more complete model of role. In: ACM Workshop on Role-Based Access Control, pp. 55\u201362 (1998)","key":"17_CR8","DOI":"10.1145\/286884.286898"},{"key":"17_CR9","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1380564.1380569","volume":"11","author":"J.Y. Halpern","year":"2008","unstructured":"Halpern, J.Y., Weissman, V.: Using first-order logic to reason about policies. ACM Transactions on Information and System Security\u00a011, 21:1\u201321:41 (2008)","journal-title":"ACM Transactions on Information and System Security"},{"issue":"6","key":"17_CR10","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1109\/MSP.2007.158","volume":"5","author":"N. Li","year":"2007","unstructured":"Li, N., Byun, J.-W., Bertino, E.: A critique of the ANSI standard on role-based access control. IEEE Security & Privacy\u00a05(6), 41\u201349 (2007)","journal-title":"IEEE Security & Privacy"},{"doi-asserted-by":"crossref","unstructured":"Moffett, J.D., Lupu, E.: The uses of role hierarchies in access control. In: ACM Workshop on Role-Based Access Control, pp. 153\u2013160 (1999)","key":"17_CR11","DOI":"10.1145\/319171.319186"},{"issue":"3","key":"17_CR12","doi-asserted-by":"publisher","first-page":"305","DOI":"10.1093\/comjnl\/bxn016","volume":"52","author":"D.J. Power","year":"2009","unstructured":"Power, D.J., Slaymaker, M., Simpson, A.C.: On formalizing and normalizing role-based access control systems. Computer Journal\u00a052(3), 305\u2013325 (2009)","journal-title":"Computer Journal"},{"key":"17_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"403","DOI":"10.1007\/3-540-45067-X_35","volume-title":"Information Security and Privacy","author":"J. Reid","year":"2003","unstructured":"Reid, J., Cheong, I., Henricksen, M., Smith, J.: A novel use of RBAC to protect privacy in distributed health care information systems. In: Safavi-Naini, R., Seberry, J. (eds.) ACISP 2003. LNCS, vol.\u00a02727, pp. 403\u2013415. Springer, Heidelberg (2003)"},{"unstructured":"Sandhu, R., Bellare, M., Ganesan, R.: Password-enabled PKI: Virtual smart cards versus virtual soft tokens. In: PKI Research Workshop (April 2002)","key":"17_CR14"},{"issue":"2","key":"17_CR15","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1109\/2.485845","volume":"29","author":"R.S. Sandhu","year":"1996","unstructured":"Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. IEEE Computer\u00a029(2), 38\u201347 (1996)","journal-title":"IEEE Computer"}],"container-title":["Lecture Notes in Computer Science","Information Security Practice and Experience"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-38033-4_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,12]],"date-time":"2019-05-12T18:01:21Z","timestamp":1557684081000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-38033-4_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9783642380327","9783642380334"],"references-count":15,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-38033-4_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2013]]}}}