{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,5]],"date-time":"2026-08-05T22:52:55Z","timestamp":1785970375070,"version":"3.56.0"},"reference-count":30,"publisher":"Elsevier","isbn-type":[{"value":"9780120121465","type":"print"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[1998]]},"DOI":"10.1016\/s0065-2458(08)60206-5","type":"book-chapter","created":{"date-parts":[[2011,1,19]],"date-time":"2011-01-19T05:56:15Z","timestamp":1295416575000},"page":"237-286","source":"Crossref","is-referenced-by-count":276,"title":["Role-based Access Control"],"prefix":"10.1016","author":[{"given":"Ravi S.","family":"Sandhu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/S0065-2458(08)60206-5_bib1","doi-asserted-by":"crossref","unstructured":"R.W. Baldwin (1990). Naming and grouping privileges to simplify security management in large database. Proceedings of IEEE Symposium on Research in Security and Privacy, Oakland CA, pp. 61\u201370","DOI":"10.1109\/RISP.1990.63844"},{"key":"10.1016\/S0065-2458(08)60206-5_bib2","unstructured":"D.E. Bell (1987). Secure computer systems: a network interpretation. Proceedings of 3rd Annual Computer Security Application Conference. pp. 32\u201339"},{"key":"10.1016\/S0065-2458(08)60206-5_bib3","unstructured":"Common Criteria Editorial Board (1996). Common Criteria for Information Technology Security, Version 1.0"},{"key":"10.1016\/S0065-2458(08)60206-5_bib4","unstructured":"D.F. Ferraiolo R. Kuhn (1992). Role-based access controls. Proceedings of 15th NIST-NCSC National Computer Security Conference, Baltimore MD. pp. 554\u2013563"},{"key":"10.1016\/S0065-2458(08)60206-5_bib5","unstructured":"D.F. Ferraiolo D.M. Gilbert N. Lynch (1993). An examination of federal and commercial access control policy needs. Proceedings of NIST-NCSC National Computer Security Conference, Baltimore MD. pp. 107\u2013116"},{"key":"10.1016\/S0065-2458(08)60206-5_bib6","unstructured":"L. Guiri (1995). A new model for role-based access control. Proceedings of 11th Annual Computer Security Application Conference, New Orleans LA. pp. 249\u2013255"},{"key":"10.1016\/S0065-2458(08)60206-5_bib7","series-title":"Database Security VIII: Status and Prospects","article-title":"User-role based security in the ADAM object-oriented design and analyses environment","author":"Hu","year":"1995"},{"key":"10.1016\/S0065-2458(08)60206-5_bib8","series-title":"ISO\/IEC 10040: Information Technology\u2014Open Systems Interconnection-Systems Management Overview.","author":"ISO","year":"1992"},{"key":"10.1016\/S0065-2458(08)60206-5_bib9","series-title":"Database Security VI: Status and Prospects","first-page":"91","article-title":"Extending access controls with duties\u2014realized by active mechanisms","author":"Jonscher","year":"1993"},{"key":"10.1016\/S0065-2458(08)60206-5_bib10","doi-asserted-by":"crossref","unstructured":"T.M. P. Lee (1988). Using mandatory integrity to enforce \u201ccommercial\u201d security. Proceedings of IEEE Symposium on Security and Privacy, Oakland CA, pp. 140\u2013146","DOI":"10.1109\/SECPRI.1988.8106"},{"issue":"8","key":"10.1016\/S0065-2458(08)60206-5_bib11","doi-asserted-by":"crossref","first-page":"661","DOI":"10.1016\/0167-4048(94)90048-5","article-title":"Design for dynamic user-role-based security","volume":"13","author":"Mohammed","year":"1994","journal-title":"Computers & Security"},{"key":"10.1016\/S0065-2458(08)60206-5_bib12","series-title":"Integrated Network Management II","first-page":"595","article-title":"Delegation of authority","author":"Moffett","year":"1991"},{"key":"10.1016\/S0065-2458(08)60206-5_bib13","series-title":"Role-based access control in ORACLE7 and Trusted ORACLE7","author":"Notargiacomo","year":"1997"},{"key":"10.1016\/S0065-2458(08)60206-5_bib14","series-title":"Database Security VIII: Status and Prospects","article-title":"Access rights administration in role-based security systems","author":"Nyanchama","year":"1995"},{"key":"10.1016\/S0065-2458(08)60206-5_bib15","doi-asserted-by":"crossref","unstructured":"R.S. Sandhu (1988). Transaction control expressions for separation of duties. Proceedings of 4th Annual Computer Security Application Conference, Orlando FL. pp. 282\u2013286","DOI":"10.1109\/ACSAC.1988.113349"},{"key":"10.1016\/S0065-2458(08)60206-5_bib16","series-title":"Database Security IV: Status and Prospects","first-page":"179","article-title":"Separation of duties in computerized information systems","author":"Sandhu","year":"1991"},{"key":"10.1016\/S0065-2458(08)60206-5_bib17","doi-asserted-by":"crossref","unstructured":"R.S. Sandhu (1992). The typed access matrix model. Proceedings of IEEE Symposium on Research in Security and Privacy, Oakland CA. pp. 122\u2013136","DOI":"10.1109\/RISP.1992.213266"},{"issue":"11","key":"10.1016\/S0065-2458(08)60206-5_bib18","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1109\/2.241422","article-title":"Lattice-based access control models","volume":"26","author":"Sandhu","year":"1993","journal-title":"IEEE Computer"},{"key":"10.1016\/S0065-2458(08)60206-5_bib19","series-title":"Proc. Fourth European Symposium on Research in Computer Security","article-title":"Role hierarchies and constraints for lattice-based access controls","author":"Sandhu","year":"1996"},{"key":"10.1016\/S0065-2458(08)60206-5_bib20","series-title":"Database Security XI: Status and Prospects","article-title":"The URA97 model for role-based user-role assignments","author":"Sandhu","year":"1997"},{"key":"10.1016\/S0065-2458(08)60206-5_bib21","unstructured":"R.S. Sandhu H.L. Feinstein (1994). A three tier architecture for role-based access control. Proceedings of 17th NIST-NCSC National Computer Security Conference, Baltimore MD. pp. 34\u201346"},{"issue":"9","key":"10.1016\/S0065-2458(08)60206-5_bib22","doi-asserted-by":"crossref","first-page":"40","DOI":"10.1109\/35.312842","article-title":"Access control: principles and practice","volume":"32","author":"Sandhu","year":"1994","journal-title":"IEEE Communications"},{"issue":"2","key":"10.1016\/S0065-2458(08)60206-5_bib23","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/2.485845","article-title":"Role-based access control models","volume":"29","author":"Sandhu","year":"1996","journal-title":"IEEE Computer"},{"key":"10.1016\/S0065-2458(08)60206-5_bib24","series-title":"The ARBAC97 model for role-based administration of roles: preliminary description and outline","author":"Sandhu","year":"1997"},{"key":"10.1016\/S0065-2458(08)60206-5_bib25","unstructured":"W.R. Schockley (1988). Implementing the Clark\/Wilson integrity policy using current technology. Proceedings of NIST-NCSC National Computer Security Conference. pp. 29\u201337"},{"key":"10.1016\/S0065-2458(08)60206-5_bib26","unstructured":"R. Thomas R.S. Sandhu (1994). Conceptual foundations for a model of task-based authorizations. Proceedings of IEEE Computer Security Foundations Workshop 7, Franconia NH. pp. 66\u201379"},{"key":"10.1016\/S0065-2458(08)60206-5_bib27","series-title":"Database Security XI: Status and Prospects","article-title":"Task-based authorization controls (TBAC): models for active and enterprise-oriented authorization management","author":"Thomas","year":"1997"},{"key":"10.1016\/S0065-2458(08)60206-5_bib28","series-title":"Database Security IV: Status and Prospects","first-page":"151","article-title":"Role-based application design and enforcement","author":"Thomsen","year":"1991"},{"key":"10.1016\/S0065-2458(08)60206-5_bib29","series-title":"The ANSI\/X3\/SPARC DBMS framework: Report of the study group on data base management system","author":"Tsichritizis","year":"1978"},{"issue":"8","key":"10.1016\/S0065-2458(08)60206-5_bib30","doi-asserted-by":"crossref","first-page":"673","DOI":"10.1016\/0167-4048(94)90049-3","article-title":"The management of computer security profiles using a role-oriented approach","volume":"13","author":"von Solms","year":"1994","journal-title":"Computers & Security"}],"container-title":["Advances in Computers"],"original-title":[],"language":"en","deposited":{"date-parts":[[2019,6,7]],"date-time":"2019-06-07T23:51:14Z","timestamp":1559951474000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0065245808602065"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[1998]]},"ISBN":["9780120121465"],"references-count":30,"URL":"https:\/\/doi.org\/10.1016\/s0065-2458(08)60206-5","relation":{},"ISSN":["0065-2458"],"issn-type":[{"value":"0065-2458","type":"print"}],"subject":[],"published":{"date-parts":[[1998]]}}}