Development Of Role Based Access Control Application Model For Information Security Management In Electronic Payment System

ABSTRACT Role Based Access Control (RBAC) is a flexible and policy neutral access control security management model. For large systems, with hundreds of roles, thousands of users and millions of permissions, managing roles, users, permissions and their interrelationships is a formidable task that ca1mot realistically be centralised in a small team of security administrators. An appealing possibility is to use RBAC itself to facilitate decentralised access control security administration of RBAC. In this thesis, each of the basic concepts of RBAC is formalised, for their definitions to be clea…