The DOI matches its Crossref record.
Transaction control expressions for separation of duties
Abstract
The author describes a model and notation for specifying and enforcing aspects of integrity policies, particularly separation of duties. The key idea is to associate a transaction control expression with each information object. The transaction control expression constrains the pattern in which transactions can be executed on an object. As operations are actually executed the transaction control expressions gets converted to a history. This history serves to enforce separation of duties. Transient objects with a short lifetime are distinguished from persistent objects which are long-lived. Separation of duties is achieved by maintaining a complete history for transient objects but only a partial history for persistent objects. This is possible because of the system-enforced rule that transactions are executed on persistent objects only as a side effect of execution on transient objects.>
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cited by
Proposed NIST standard for role-based access control
Ferraiolo, D. F., Sandhu, R., Gavrila, S., Kuhn, D. R., & Chandramouli, R. (2001) · ACM Transactions on Information and System Security · doi:10.1145/501978.501980 · Cited by 2,544
Self-citationThe UCONABCusage control model
Park, J., & Sandhu, R. (2004) · ACM Transactions on Information and System Security · doi:10.1145/984334.984339 · Cited by 956
Self-citationThe NIST model for role-based access control: towards a unified standard
Sandhu, R., Ferraiolo, D., & Kuhn, R. (2000) · Proceedings of the fifth ACM workshop on Role-based access control · doi:10.1145/344287.344301 · Cited by 877
Self-citationSandhu, R. S. (1998) · Advances in Computers · doi:10.1016/s0065-2458(08)60206-5 · Cited by 497
Self-citationSeparation of duty in role-based environments
Simon, R. T., & Zurko, M. E. (2002) · Proceedings 10th Computer Security Foundations Workshop · doi:10.1109/csfw.1997.596811 · Cited by 349
Metadata
- Authors
- Sandhu, R.
- Venue
- [Proceedings 1988] Fourth Aerospace Computer Security Applications
- Publisher
- IEEE Comput. Soc. Press
- Published
- 2003-01-06
- Pages
- 282-286
- OpenAlex
- W2143509186
- Cited by
- 165
- References
- 0
- FWCI
- 16.70
- Type
- conference paper
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Transaction control expressions for separation of duties. https://app.cochat.ai/papers/10.1109/acsac.1988.113349
- The paper
- Sandhu, R. (2003). Transaction control expressions for separation of duties. [Proceedings 1988] Fourth Aerospace Computer Security Applications. https://doi.org/10.1109/acsac.1988.113349
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
