The University of Southampton
University of Southampton Institutional Repository

A Distributed Calculus for Role-Based Access Control

Braghin, C., Gorla, D. and Sassone, V. (2004) A Distributed Calculus for Role-Based Access Control At 17th IEEE Computer Security Foundations Workshop, CSFW'04.. , pp. 48-60.

Record type: Conference or Workshop Item (Paper)


Role-based access control (RBAC) is increasingly attracting attention because it reduces the complexity and cost of security administration by interposing the notion of role in the assignment of permissions to users. In this paper, we present a formal framework relying on an extension of the ? calculus to study the behavior of concurrent systems in a RBAC scenario. We define a type system ensuring that the specified policy is respected during computations, and a bisimulation to equate systems. The theory is then applied to three meaningful examples, namely finding the ‘minimal’ policy to run a given system, refining a system to be run under a given policy (whenever possible), and minimizing the number of users in a given system without changing the overall behavior.

PDF rbacCSFWoff.pdf - Other
Download (389kB)

More information

Published date: 2004
Venue - Dates: 17th IEEE Computer Security Foundations Workshop, CSFW'04., 2004-01-01
Keywords: role-based access control, pi calculus, process calculi, type systems, bisimulations, observational equivalences.
Organisations: Web & Internet Science


Local EPrints ID: 262299
ISBN: 0-7695-2169-X
PURE UUID: e4d6ca89-ebc2-4eec-ae07-e0a2351c839c

Catalogue record

Date deposited: 11 Apr 2006
Last modified: 18 Jul 2017 08:52

Export record


Author: C. Braghin
Author: D. Gorla
Author: V. Sassone

University divisions

Download statistics

Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.

View more statistics

Atom RSS 1.0 RSS 2.0

Contact ePrints Soton:

ePrints Soton supports OAI 2.0 with a base URL of

This repository has been built using EPrints software, developed at the University of Southampton, but available to everyone to use.

We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we will assume that you are happy to receive cookies on the University of Southampton website.