Context Navigation

Back to Internal/Rbac/RbacResources

RbacResources: barkley-et-al-rbac-web-97.ps

File barkley-et-al-rbac-web-97.ps, 128.9 KB (added by hedinger, 18 years ago)

Line
1	%!PS-Adobe-2.0
2	%%Creator: dvips 5.47 Copyright 1986-91 Radical Eye Software
3	%%Title: paper.dvi
4	%%Pages: 11 1
5	%%BoundingBox: 0 0 612 792
6	%%EndComments
7	%%BeginProcSet: texc.pro
8	/TeXDict 200 dict def TeXDict begin /N /def load def /B{bind def}N /S /exch
9	load def /X{S N}B /TR /translate load N /isls false N /vsize 10 N /@rigin{
10	isls{[0 1 -1 0 0 0]concat}if 72 Resolution div 72 VResolution div neg scale
11	Resolution VResolution vsize neg mul TR matrix currentmatrix dup dup 4 get
12	round 4 exch put dup dup 5 get round 5 exch put setmatrix}N /@letter{/vsize 10
13	N}B /@landscape{/isls true N /vsize -1 N}B /@a4{/vsize 10.6929133858 N}B /@a3{
14	/vsize 15.5531 N}B /@ledger{/vsize 16 N}B /@legal{/vsize 13 N}B /@manualfeed{
15	statusdict /manualfeed true put}B /@copies{/#copies X}B /FMat[1 0 0 -1 0 0]N
16	/FBB[0 0 0 0]N /nn 0 N /IE 0 N /ctr 0 N /df-tail{/nn 8 dict N nn begin
17	/FontType 3 N /FontMatrix fntrx N /FontBBox FBB N string /base X array
18	/BitMaps X /BuildChar{CharBuilder}N /Encoding IE N end dup{/foo setfont}2
19	array copy cvx N load 0 nn put /ctr 0 N[}B /df{/sf 1 N /fntrx FMat N df-tail}
20	B /dfs{div /sf X /fntrx[sf 0 0 sf neg 0 0]N df-tail}B /E{pop nn dup definefont
21	setfont}B /ch-width{ch-data dup length 5 sub get}B /ch-height{ch-data dup
22	length 4 sub get}B /ch-xoff{128 ch-data dup length 3 sub get sub}B /ch-yoff{
23	ch-data dup length 2 sub get 127 sub}B /ch-dx{ch-data dup length 1 sub get}B
24	/ch-image{ch-data dup type /stringtype ne{ctr get /ctr ctr 1 add N}if}B /id 0
25	N /rw 0 N /rc 0 N /gp 0 N /cp 0 N /G 0 N /sf 0 N /CharBuilder{save 3 1 roll S
26	dup /base get 2 index get S /BitMaps get S get /ch-data X pop /ctr 0 N ch-dx 0
27	ch-xoff ch-yoff ch-height sub ch-xoff ch-width add ch-yoff setcachedevice
28	ch-width ch-height true[1 0 0 -1 -.1 ch-xoff sub ch-yoff .1 add]/id ch-image N
29	/rw ch-width 7 add 8 idiv string N /rc 0 N /gp 0 N /cp 0 N{rc 0 ne{rc 1 sub
30	/rc X rw}{G}ifelse}imagemask restore}B /G{{id gp get /gp gp 1 add N dup 18 mod
31	S 18 idiv pl S get exec}loop}B /adv{cp add /cp X}B /chg{rw cp id gp 4 index
32	getinterval putinterval dup gp add /gp X adv}B /nd{/cp 0 N rw exit}B /lsh{rw
33	cp 2 copy get dup 0 eq{pop 1}{dup 255 eq{pop 254}{dup dup add 255 and S 1 and
34	or}ifelse}ifelse put 1 adv}B /rsh{rw cp 2 copy get dup 0 eq{pop 128}{dup 255
35	eq{pop 127}{dup 2 idiv S 128 and or}ifelse}ifelse put 1 adv}B /clr{rw cp 2
36	index string putinterval adv}B /set{rw cp fillstr 0 4 index getinterval
37	putinterval adv}B /fillstr 18 string 0 1 17{2 copy 255 put pop}for N /pl[{adv
38	1 chg}bind{adv 1 chg nd}bind{1 add chg}bind{1 add chg nd}bind{adv lsh}bind{
39	adv lsh nd}bind{adv rsh}bind{adv rsh nd}bind{1 add adv}bind{/rc X nd}bind{1
40	add set}bind{1 add clr}bind{adv 2 chg}bind{adv 2 chg nd}bind{pop nd}bind]N /D{
41	/cc X dup type /stringtype ne{]}if nn /base get cc ctr put nn /BitMaps get S
42	ctr S sf 1 ne{dup dup length 1 sub dup 2 index S get sf div put}if put /ctr
43	ctr 1 add N}B /I{cc 1 add D}B /bop{userdict /bop-hook known{bop-hook}if /SI
44	save N @rigin 0 0 moveto}N /eop{clear SI restore showpage userdict /eop-hook
45	known{eop-hook}if}N /@start{userdict /start-hook known{start-hook}if
46	/VResolution X /Resolution X 1000 div /DVImag X /IE 256 array N 0 1 255{IE S 1
47	string dup 0 3 index put cvn put}for}N /p /show load N /RMat[1 0 0 -1 0 0]N
48	/BDot 260 string N /rulex 0 N /ruley 0 N /v{/ruley X /rulex X V}B /V
49	statusdict begin /product where{pop product dup length 7 ge{0 7 getinterval
50	(Display)eq}{pop false}ifelse}{false}ifelse end{{gsave TR -.1 -.1 TR 1 1 scale
51	rulex ruley false RMat{BDot}imagemask grestore}}{{gsave TR -.1 -.1 TR rulex
52	ruley scale 1 1 false RMat{BDot}imagemask grestore}}ifelse B /a{moveto}B
53	/delta 0 N /tail{dup /delta X 0 rmoveto}B /M{S p delta add tail}B /b{S p tail}
54	B /c{-4 M}B /d{-3 M}B /e{-2 M}B /f{-1 M}B /g{0 M}B /h{1 M}B /i{2 M}B /j{3 M}B
55	/k{4 M}B /w{0 rmoveto}B /l{p -4 w}B /m{p -3 w}B /n{p -2 w}B /o{p -1 w}B /q{p 1
56	w}B /r{p 2 w}B /s{p 3 w}B /t{p 4 w}B /x{0 S rmoveto}B /y{3 2 roll p a}B /bos{
57	/SS save N}B /eos{clear SS restore}B end
58	%%EndProcSet
59	%%BeginProcSet: special.pro
60	TeXDict begin /SDict 200 dict N SDict begin /@SpecialDefaults{/hs 612 N /vs
61	792 N /ho 0 N /vo 0 N /hsc 1 N /vsc 1 N /ang 0 N /CLIP false N /BBcalc false N
62	/p 3 def}B /@scaleunit 100 N /@hscale{@scaleunit div /hsc X}B /@vscale{
63	@scaleunit div /vsc X}B /@hsize{/hs X /CLIP true N}B /@vsize{/vs X /CLIP true
64	N}B /@hoffset{/ho X}B /@voffset{/vo X}B /@angle{/ang X}B /@rwi{10 div /rwi X}
65	B /@llx{/llx X}B /@lly{/lly X}B /@urx{/urx X}B /@ury{/ury X /BBcalc true N}B
66	/magscale true def end /@MacSetUp{userdict /md known{userdict /md get type
67	/dicttype eq{md begin /letter{}N /note{}N /legal{}N /od{txpose 1 0 mtx
68	defaultmatrix dtransform S atan/pa X newpath clippath mark{transform{
69	itransform moveto}}{transform{itransform lineto}}{6 -2 roll transform 6 -2
70	roll transform 6 -2 roll transform{itransform 6 2 roll itransform 6 2 roll
71	itransform 6 2 roll curveto}}{{closepath}}pathforall newpath counttomark array
72	astore /gc xdf pop ct 39 0 put 10 fz 0 fs 2 F/\|______Courier fnt invertflag{
73	PaintBlack}if}N /txpose{pxs pys scale ppr aload pop por{noflips{pop S neg S TR
74	pop 1 -1 scale}if xflip yflip and{pop S neg S TR 180 rotate 1 -1 scale ppr 3
75	get ppr 1 get neg sub neg ppr 2 get ppr 0 get neg sub neg TR}if xflip yflip
76	not and{pop S neg S TR pop 180 rotate ppr 3 get ppr 1 get neg sub neg 0 TR}if
77	yflip xflip not and{ppr 1 get neg ppr 0 get neg TR}if}{noflips{TR pop pop 270
78	rotate 1 -1 scale}if xflip yflip and{TR pop pop 90 rotate 1 -1 scale ppr 3 get
79	ppr 1 get neg sub neg ppr 2 get ppr 0 get neg sub neg TR}if xflip yflip not
80	and{TR pop pop 90 rotate ppr 3 get ppr 1 get neg sub neg 0 TR}if yflip xflip
81	not and{TR pop pop 270 rotate ppr 2 get ppr 0 get neg sub neg 0 S TR}if}
82	ifelse scaleby96{ppr aload pop 4 -1 roll add 2 div 3 1 roll add 2 div 2 copy
83	TR .96 dup scale neg S neg S TR}if}N /cp{pop pop showpage pm restore}N end}if}
84	if}N /normalscale{Resolution 72 div VResolution 72 div neg scale magscale{
85	DVImag dup scale}if}N /psfts{S 65536 div N}N /startTexFig{/psf$SavedState save
86	N userdict maxlength dict begin /magscale false def normalscale currentpoint
87	TR /psf$ury psfts /psf$urx psfts /psf$lly psfts /psf$llx psfts /psf$y psfts
88	/psf$x psfts currentpoint /psf$cy X /psf$cx X /psf$sx psf$x psf$urx psf$llx
89	sub div N /psf$sy psf$y psf$ury psf$lly sub div N psf$sx psf$sy scale psf$cx
90	psf$sx div psf$llx sub psf$cy psf$sy div psf$ury sub TR /showpage{}N
91	/erasepage{}N /copypage{}N /p 3 def @MacSetUp}N /doclip{psf$llx psf$lly
92	psf$urx psf$ury currentpoint 6 2 roll newpath 4 copy 4 2 roll moveto 6 -1 roll
93	S lineto S lineto S lineto closepath clip newpath moveto}N /endTexFig{end
94	psf$SavedState restore}N /@beginspecial{SDict begin /SpecialSave save N gsave
95	normalscale currentpoint TR @SpecialDefaults}N /@setspecial{CLIP{newpath 0 0
96	moveto hs 0 rlineto 0 vs rlineto hs neg 0 rlineto closepath clip}if ho vo TR
97	hsc vsc scale ang rotate BBcalc{rwi urx llx sub div dup scale llx neg lly neg
98	TR}if /showpage{}N /erasepage{}N /copypage{}N newpath}N /@endspecial{grestore
99	clear SpecialSave restore end}N /@defspecial{SDict begin}N /@fedspecial{end}B
100	/li{lineto}B /rl{rlineto}B /rc{rcurveto}B /np{/SaveX currentpoint /SaveY X N 1
101	setlinecap newpath}N /st{stroke SaveX SaveY moveto}N /fil{fill SaveX SaveY
102	moveto}N /ellipse{/endangle X /startangle X /yrad X /xrad X /savematrix matrix
103	currentmatrix N TR xrad yrad scale 0 0 1 startangle endangle arc savematrix
104	setmatrix}N end
105	%%EndProcSet
106	TeXDict begin 1000 300 300 @start /Fa 10 107 df<12C0A37E12601270123012387E7E6C
107	7EEA03F0EA00FEEB1FF0903803FFFC5B90387FF000D801FCC7FCEA07C048C8FC121C5A5A1260A2
108	12E05AA3C9FCA8B612FCA21E277C9F27>23 D<156015701530153881150C150E81B712C082C912
109	78163EEE0F80EE03E0EE0F80EE1E0016785EB712C05EC80007C7FC150E5DA25D1530157015602B
110	1C7D9932>41 D<01061303A2010E80010C1301011C80496D7E491470A248B612FC4881D80780C7
111	120F001EC8EA03C0007CED01F000F0ED0078007CED01F0001EED03C06CED0780D80380EC0E006C
112	B612FC6C5D0170C7127001301460013814E06D495A010C5C010E1303010691C7FCA22D1C7E9932
113	>44 D<EB3FFF90B5FC3803E000EA0780000EC7FC5A5A123012701260A212E05AA2B6FCA200C0C7
114	FCA27E1260A21270123012387E7E6C7EEA03F0C6B5FC131F181E7C9A21>50
115	D<1403A214071406140E140C141C1418143814301470146014E014C013011480130314005B1306
116	130E130C131C1318A2133813301370136013E05B12015B120390C7FC5A1206120E120C121C1218
117	123812301270126012E05AA2183079A300>54 D<00C01430A26C147000601460007014E0003014
118	C0A20038130100181480A2001C1303000C1400000E5B3807FFFEA2EB000E6C130CA2EB801C0001
119	1318EBC03800001330A2EBE070EB6060EB70E0EB30C0A21339EB1980A2131F6DC7FCA21306A21C
120	2480A21D>56 D<B512F8A2C71218AE387FFFF8A2C71218AFB512F8A215237DA21C>I<1303A2EA
121	01FBEA07FFEA0F0F381C0780A238380FC0130D007813E0EA700C131C131800F013F0A213381330
122	A313701360A213E013C0A312F11380007113E0A21273EA7B01003B13C0A2381F0380EA1E07380F
123	0F00EA07FEEA0FF8000CC7FCA3142A7EA519>59 D<130CA2131EA2133F1333A2EB73801361EBE1
124	C013C000017FEB8060A200031370EB003048133800061318A2000E131C000C130C001C130E0018
125	13060038130700307FA2007014800060130100E014C0481300A21A1F7D9D21>94
126	D<12C0B3B3AD02317AA40E>106 D E /Fb 34 122 df<EA7FF812FFA20D037D8B11>45
127	D<130113031307130F131E137EEA03FEEA07DEEA001CA2133CA21338A21378A21370A213F0A213
128	E0A21201A213C0A21203A21380A21207EAFFFCA210217AA019>49 D<EBC00CEBF03CEBFFF84813
129	F014C0EB8000A2120390C7FCA35AEA067FEBFF803807C3C0EA0F81380E01E0120C1200A4130312
130	7000F013C0A2EB078012C0EB0F00131E6C5AEA78F8EA3FF0EA1FC016227BA019>53
131	D<14035CA25C1580141FA214371477146714C7A2EB0187A2EB0307A21306130E130C1318A21330
132	90383FFFC05BEB600313C012011380EA0300A21206120E001F130739FFC03FFCA21E237DA224>
133	65 D<90B512E015F890380F003C151E5B011E130E150FA2013E130E013C131EA2153C017C1378
134	017813F0EC01E090387FFFC090B5FC9038F003E0EC00F015781201491338153CA2000314785BA2
135	15F00007EB01E0EB8003EC07C0000FEB1F00B512FE14F020227DA122>I<9138FF01800107EBC3
136	0090381FC1E390383E00770178133F4848133E4848131E485A5B48C7121C5A121E5A1518127C00
137	7891C7FCA212F85AA415605A15E06C5C14015D1403007849C7FC007C130E003C5B001F1378380F
138	C1F03807FFC0C690C8FC212479A223>I<90B61280A290380F001F1507491303131E1600A2133E
139	EB3C03A21407D97C06C7FCEB780E141EEB7FFE495AEBF03C141CA20001131801E0130C151CEC00
140	1812034913381530157000075CEB80011403000FEB0FC0B6FC5D21227DA121>69
141	D<90B6FCA290380F003F150F491307131E1506A2133E133C1403140790387C06001378140E141E
142	EBFFFCA2EBF03C141C0001131813E0A3000390C7FC5BA312075BA2120FEAFFFCA220227DA120>
143	I<EBFFF8A2EB0F00A25B131EA3133E133CA3137C1378A313F85BA312015BA312035BA312075BA2
144	120FEAFFF8A215227DA113>73 D<D9FFC0EB0FFCA2010FEC1F80163F131F011BEC6F00A25E013B
145	EB019F0133149EED031ED931E0133E017113060161143C150CED187C13E101C1EB3078A2ED60F8
146	000114C001815CECE180903880F1810003EBF301D900F65BA2ECFC035A000601F85B120E001FEB
147	F0073AFFE0E07FFCA22E227DA12C>77 D<9039FF801FFCA2010FEB07E09138C00380131F011B14
148	0014E05D1339903831F006A20130130EEB70F80160130C1478151CEBE07C9038C03C18A2EC3E38
149	0001131E01801330141FEC0F70120301005B1407A25A00066D5A120E121F38FFE0015D26227DA1
150	24>I<90B512E015F890380F003C49131E150F131E1507133E150F133CA2017C130E151E017813
151	3C153801F813F0EC03E090B51280ECFE00D801F0C7FCA25BA21203A25BA21207A25BA2120FEAFF
152	F8A220227DA121>80 D<90B512C015F090380F0078153C49131E011E130EA3013E131E133CA215
153	3C017C13380178137815F0EC03C090B51200A29038F00F801407000114C0EBE003A21407120301
154	C01380A2140F120701801303A2000F148739FFF8078E15FCC7EA01F820237DA124>82
155	D<903803F86090380FFCE090381E1FC0EB7807EB700313E00001148013C0A21203150091C7FCA2
156	7F13F86CB47E14E06C13F8EB3FFC1307EB007C80141EA30030131CA3143C0070133800785B14F0
157	387C01E038EF07C0D8C7FFC7FCEAC1FC1B247DA21B>I<3BFFF03FF81FF8D9E07FEB3FF03B1F00
158	0FC007C0001E028013801700021F13065E14375E14675E14C75E381F0187000F5DEB0307ED8180
159	13060383C7FC130C158613180138138C0130139C0160139815B801C013B015E013805D13005D12
160	0E92C8FC120C2D2376A131>87 D<EBF9C0EA03FDEA078FEA0F07001E1380A2123C127C00781300
161	A25B12F8EAF00E1418EB1E381430133C38707C703879FE60383FCFE0381F07C015157B9419>97
162	D<137E3801FF80EA07C3EA0F07121EA248C7FCA25AA312F85AA31303EA7007EA780EEA3C3CEA3F
163	F8EA0FE011157B9416>99 D<147CEB03FC14F8EB0078A31470A214F0A214E0A21301A2EBF9C0EA
164	03FDEA078FEA0F07001E1380A2123C127C00781300A25B12F8EAF00E1418EB1E381430133C3870
165	7C703879FE60383FCFE0381F07C016237BA219>I<EA01F8EA07FEEA0F8EEA1E06123C1278130E
166	EAF83CEAFFF813C0EAF000A25AA31306130EEAF01CEA7878EA3FF0EA1FC00F157A9416>I<147E
167	14FFEB01EF14CFEB038E1480A213071400A45B130EEBFFF0A2EB0E00131EA2131CA4133C1338A4
168	13781370A413F05BA312015BA21271EAF38000F7C7FCB4FC127E182D82A20F>I<EB1F38EB7FB8
169	EBF1F8EA01E03803C0F0A2EA0780120FEB00E0A21301121F001E13C0A21303A2EB0780EA0E0FEA
170	0F3FEA07FF3803E700EA00075BA2130E131E1270EAF03C13F8B45AEA7FC0151F7E9416>I<EA01
171	F0120F5B1201A35BA21203A25BA21207A2EB1F80EB7FC0EA0FF1EBC1E013801300EA1E0114C012
172	1CA2EA3C0314801238EB07860078130E140CEA700FEB0E1C38F00F38EB07F038E003E017237DA2
173	19>I<1378A313701300A8EA0F80EA1FC0123912311271126112E3EA0380A212071300A25AEA0E
174	18EA1E38EA1C30A2137013E0EA1FC0EA0F800D217DA00F>I<EA01F0120F5B1201A35BA21203A2
175	5BA21207A2EB01E0EB07F0380F0E30EB1C70380E38F01370381EE0E0381FC0005B13F0EA3DF8EA
176	3C78EA383CEB1C3000781370EB3C60EA703814E038F03DC0EB1F8038E00F0014237DA216>107
177	D<EA03E0121F13C01203A31380A21207A21300A25AA2120EA2121EA2121CA2123CA21238A21278
178	A21270EA718012F112F3EAE300A212F7127E123C0B237CA20C>I<390F03F03F3A1F8FF8FF8039
179	3BDE39E33A31F83F83C03961F01F01EBE01E39E3C03C0300031580EB8038A20007EB78071600EB
180	0070ED0F0C489038F00E1C1618000EEBE01EED1C38D81E01EB1E70ED0FE0001C9038C007C02615
181	7D9428>I<380F07E0381F9FF0383BFC783831F838EA61F013E038E3C078000313701380A20007
182	13F05C1300903801E180000F13C31500EA0E035C001E13CEEB01FC381C00F819157D941B>I<13
183	7E3801FF803807C7C0EA0F83381F01E0121E123CA21278A2130300F813C012F0A2EB0780130F00
184	701300EA781EEA3C7CEA1FF0EA0FC013157B9419>I<3803C1F03807E7F8380EFF3C380C7C1EEA
185	1878A2EA38F0120013E0A20001133E143C13C0A200031378A214F0EBE1E03807F3C0EBFF80EB3E
186	0090C7FC5AA2120EA2121EA2121CEAFFC0A2171F7F9419>I<380F07C0381F9FE0383BFC70EA31
187	F0006113F013E038E3C0E0000313005BA21207A290C7FCA25AA2120EA2121EA2121C14157D9415
188	>114 D<13FE3803FF80EA0783EA0F07120EA2EB0300000FC7FC13F013FCEA03FEEA007F131F7F
189	1270EAF00EA2EAE01EEAF07CEA7FF8EA1FE011157D9414>I<13C01201A412031380A31207EAFF
190	F8A2EA07005A120EA3121E121CA3123C123813181338EA7830EA707013E0EA79C0EA3F80EA1F00
191	0D1F7C9E10>I<38078038EA1FC0383CE078123000701370126138E1C0F01201000313E0138013
192	811207EB01C014C3EB03C714C61486EB078EEB9FCC3803FDFC3801F0F818157D941A>I<380780
193	1CEA1FC0383CE03C003013381270126138E1C078000113701203138014F0000713E01300A21301
194	14C013031307138F3803FF80EA01FBEA000313071400EA3C0F130E131EEA383C13F8EA3FE0EA1F
195	80161F7D9418>121 D E /Fc 1 49 df<120FA3121F121EA3123CA31278A3127012F012E01260
196	08117F910A>48 D E /Fd 32 122 df<127C12FEA5127C07077C8610>46
197	D<1438A21478A214F0A214E01301A2EB03C0A214801307A214005BA2131EA2131C133CA25BA213
198	7013F0A2485AA25B1203A2485AA290C7FC5AA2120E121EA25AA212381278A25AA25AA215317DA4
199	1C>I<13181378EA01F812FFA21201B3A7387FFFE0A213207C9F1C>49 D<1470A214F8A3497EA2
200	497EA3EB06FF80010E7FEB0C3FA201187F141F01387FEB300FA201607F140701E07F90B5FCA239
201	018001FCA200038090C7FCA20006147FA23AFFE00FFFF8A225227EA12A>65
202	D<B67E15E03907F001F86E7E157EA2157FA5157E15FE5DEC03F890B55AA29038F001FCEC007E81
203	1680151F16C0A6ED3F80A2ED7F00EC01FEB612F815C022227EA128>I<903907FE018090383FFF
204	C39038FF01E73903FC007FD807F0131F4848130F485A491307003F140348C7FCA2150112FE92C7
205	FCA9007FEC0180A36C6C1303001F15006D5B6C6C130E6C6C5BD803FC5B3900FF01F090383FFFC0
206	010790C7FC21227DA128>I<B67E15F03907F003FCEC007E81ED1F80ED0FC0ED07E0A216F01503
207	A316F8A916F0A3ED07E0A2ED0FC0ED1F80ED3F00157EEC03FCB612F0158025227EA12B>I<D903
208	FF13C0013F13E19038FF80F33901FC003FD807F0131F4848130F48481307491303003F140148C7
209	FCA2150012FE1600A791380FFFFCA2007F9038001FC0A36C7E121F7F6C7E6C6C133FEA01FC3900
210	FF80FF90383FFFE30103130026227DA12C>71 D<B512E0A23803F800B3ACB512E0A213227FA115
211	>73 D<B512E0A2D807F0C7FCB31518A41538A21570A215F014011407B6FCA21D227EA122>76
212	D<D8FFF0EC0FFF6D5C000716E0D806FC1437A3017E1467A26D14C7A290391F800187A290390FC0
213	0307A3903807E006A2903803F00CA2903801F818A3903800FC30A2EC7E60A2EC3FC0A2EC1F80A3
214	EC0F00D8FFF091B5FC140630227EA135>I<B6FC15E03907F007F0EC01FC1400157EA2157FA515
215	7EA215FC1401EC07F090B512E0150001F0C7FCADB57EA220227EA126>80
216	D<B512FEECFFC03907F007F0EC01F86E7E157E157FA6157E5D4A5AEC07F090B512C0A29038F01F
217	F0EC07F81403811401A71606EDFE0E913800FF1EB538807FFCED0FF827227EA12A>82
218	D<3803FE0C380FFF9C381F03FCEA3E0048137C0078133C00F8131CA2140C7E6C13007E13F06CB4
219	FC14E06C13F06C13F86C13FC000313FEEA007FEB03FF1300147F143F00C0131FA37E141E6C133E
220	00FC137C38FF80F838E7FFF000C013C018227DA11F>I<007FB61280A2397E03F80F0078140700
221	7014030060140100E015C0A200C01400A400001500B3A20003B512F8A222227EA127>I<B53A0F
222	FFF01FFEA2260FF00090C712E000076E14C0A26C6C9138800180153F6D1503000103C01300A26C
223	6C90387FE006156F7F6D9038C7F00CA20280EBF81C90263F81831318A2D91FC36D5A150114E390
224	3A0FE600FE60A202F6EBFFE0D907FC6D5AA201035D4A133FA26D486DC7FCA20100141E4A130EA2
225	37227FA13A>87 D<EA07FE381FFF80383F0FC0EB07E014F01303121E1200A2EA01FF120FEA3FE3
226	EA7F03127E12FE12FCA21307EAFE0F387F1FF8383FFDFFEA0FF018167E951B>97
227	D<B47EA2121FABEB8FE0EBBFFCEBF07EEBC03F9038801F80A2140F15C0A81580141F15006D5AEB
228	F0FE381E7FF8381C1FE01A237EA21F>I<EB03FEA2EB007EABEA01FE3807FFFEEA1FC3EA3F0000
229	3E137E127E127C12FCA8127C127E003E13FEEA3F01EA1F83390FFF7FC0EA01FC1A237EA21F>
230	100 D<EA01FE3807FF80381F87E0EA3F03383E01F0EA7E00007C13F812FCA2B5FCA200FCC7FCA4
231	127EA26C1318381F8038380FE0F03807FFE0C6138015167E951A>I<3801FE1F0007B51280380F
232	87F7381F03E7393E01F30014F0A66C485A380F87C048B45AD81DFEC7FC0018C8FC121C121E381F
233	FFE014FC806C7F123F397E007F8048131F48130FA36C131F007EEB3F00383F80FE380FFFF80001
234	13C019217F951C>103 D<121FEA3F80A5EA1F00C7FCA7EAFF80A2121FB2EAFFF0A20C247FA30F>
235	105 D<EAFF80A2121FB3ADEAFFF0A20C237FA20F>108 D<3AFF87F80FF090399FFC3FF83A1FBC
236	7E78FC9039F07FE0FE9039E03FC07E01C01380A201801300AD3BFFF1FFE3FFC0A22A167E952F>
237	I<38FF87F0EB9FFCEA1FF8EBF07E13E013C0A21380AD39FFF1FFC0A21A167E951F>I<13FE3807
238	FFC0380F83E0381E00F0003E13F848137CA300FC137EA7007C137CA26C13F8381F01F0380F83E0
239	3807FFC03800FE0017167E951C>I<38FF8FE0EBBFFC381FF0FEEBC03F01801380141FA2EC0FC0
240	A8EC1F80A2EC3F006D5AEBF0FEEBFFF8EB9FE00180C7FCA8EAFFF0A21A207E951F>I<38FF1F80
241	EB7FC0381F77E013E713C7A2EB83C0EB8000ADEAFFF8A213167E9517>114
242	D<EA0FFBEA3FFFEA7C1FEA7807487EA26CC7FCB4FC13F86C7E7FEA1FFF6C1380EA007FEAC00FA2
243	EAE00712F038F80F006C5AEAFFFEEAC7F811167E9516>I<13C0A41201A212031207120F121FB5
244	FCA2EA0FC0ABEBC180A513E33807E7006CB4FCEA00FC11207F9F16>I<39FFF01FE0A2390FC007
245	001406EBE00E0007130CEBF01C0003131813F800015BA26C6C5AA2EB7EC0A2137F6D5AA26DC7FC
246	A2130EA21B167F951E>118 D<39FFF01FE0A2390FC007001406EBE00E0007130CEBF01C000313
247	1813F800015BA26C6C5AA2EB7EC0A2137F6D5AA26DC7FCA2130EA2130CA25B1278EAFC3813305B
248	EA69C0EA7F80001FC8FC1B207F951E>121 D E /Fe 30 122 df<B51280A611067F9017>45
249	D<123E127FEAFF80A5EA7F00123E09097B8813>I<13075B137FEA07FFB5FCA212F8C6FCB3AB00
250	7F13FEA317277BA622>49 D<EBFFC0000713F8001F13FE383F03FFD87E001380007FEB7FC0EAFF
251	80EC3FE0A3141FEA7F00003E133FC7FC15C0A2EC7F80A2ECFF00495A5C495AEB07E0495A495A90
252	383E00E05B13789038F001C0EA01E0EA038048B5FC5A5A5A481480B6FCA31B277DA622>I<EB7F
253	C03803FFF04813FC380FC1FE381F80FF487E9038E07F80A5381FC0FF6C481300C7FC495A495AEB
254	07F0EBFFC014F8EB01FE6D7EEC7F8015C0143F15E0121EEA7F80A2EAFFC0A315C0147FD87F8013
255	80EB00FFD83F811300381FFFFC00075BC613C01B277DA622>I<EC03804A7EA24A7EA34A7EA24A
256	7EA34A7E1477ECF7FE14E3A2903801C1FFA20103801480010780EC007FA2010E80153F011E8001
257	1C131F011FB5FC4980A2903978000FFC01701307A249801503000181497FA2D8FFFE013F13FEA3
258	2F297EA834>65 D<B612FCEDFF8016E03A03FC001FF0ED07F8821503A2821501A315035EA24B5A
259	4B5A4B5AED7FC090B6C7FC16E09039FC0007F0ED03FC6F7EA26F7EA21780A617005D4B5A15074B
260	5AB712F016C04BC7FC29297DA831>I<91397FF80180903907FFFE07011FEBFF8F90397FF80FFF
261	9038FF8001D803FEC7127F4848143F49141F4848140F485A003F15075B007F1503A3484891C7FC
262	AB6C7EEE0380A2123F7F001F15076C6C15006C6C5C6D141E6C6C5CC66C6C13F890397FF807F001
263	1FB512C0010791C7FC9038007FF829297CA832>I<B712E0A33903FE001FED07F015011500A216
264	70A3913801C0781638A302031300A2140F90B5FCA3EBFE0F1403A20201130EA3161C91C7FCA316
265	3C1638167816F815011503151FB712F0A327297DA82D>69 D<B612F815FF16C03A03FE003FE0ED
266	0FF0ED07F816FC150316FEA716FC150716F8ED0FF0ED3FE090B61280EDFE0049C8FCB0B512F8A3
267	27297DA82F>80 D<B612E015FE6F7E3A03FE007FE0ED0FF06F7E82150382A65E4B5AA2ED1FE0ED
268	7FC090B500FEC7FC5D9038FE01FF9138007FC082153F82151FA81707A2ED0FF8170FB539F807FE
269	1E923801FFFC9238003FF030297DA834>82 D<9038FF80600003EBF0E0000F13FFEA1FC0383F00
270	1F003E1307007E1303127C00FC1301A214007E7E6D130013F8EBFFC06C13F814FE6CEBFF806C14
271	C07E6C14E0000114F0EA003F010313F8EB001F140F140700E013031401A37E15F06C13036C14E0
272	B413079038E01FC090B5128000E1EBFE0038C03FF81D297CA826>I<B539F801FFFCA3D803FEC7
273	EA0700B3A95E0001150E7F6C151E6E5B017F5C90393FE001F890391FF807F00107B512C001015C
274	9026003FFCC7FC2E297DA835>85 D<3803FFC0000F13F0381F81FC486C7E147FA2EC3F80A2EA1F
275	80C7FCA2EB1FFF48B5FC3807FE3FEA1FE0EA3FC0EA7F80130012FEA3147F7E6CEBFFC0393FC3DF
276	FC381FFF8F3803FE071E1B7E9A21>97 D<EB3FF83801FFFE3807F83F390FE07F80EA1FC0EA3F80
277	A2127F9038003F004890C7FCA97E7F003FEB01C013C0001F1303390FE007803907F83F003801FF
278	FC38003FF01A1B7E9A1F>99 D<EC3FF8A31403ACEB3FE33801FFFB3803F83F380FE00F381FC007
279	383F8003A2127F13005AA97EA2EA3F801407381FC00F380FE01F3A07F07FFF803801FFFB38003F
280	C3212A7EA926>I<EB3FE03801FFFC3807F07E48487E391FC01F80393F800FC0A2EA7F00EC07E0
281	5AA390B5FCA290C8FCA47E7F003F14E01401D81FC013C0380FE0073903F81F803901FFFE003800
282	3FF81B1B7E9A20>I<EAFFE0A3120FAC14FF01E313C09038E787E09038EE07F09038FC03F813F8
283	13F0A313E0AF3AFFFE3FFF80A3212A7DA926>104 D<EA0F80EA1FC013E0123FA3121F13C0EA0F
284	80C7FCA7EAFFE0A3120FB3A3EAFFFEA30F2B7DAA14>I<EAFFE0A3120FB3B2EAFFFEA30F2A7DA9
285	14>108 D<3BFFC07F800FF0903AC1FFE03FFC903AC7C3F0F87E3B0FCF03F9E07F903ADC01FB80
286	3F01F8D9FF00138001F05BA301E05BAF3CFFFE1FFFC3FFF8A3351B7D9A3C>I<38FFC0FF01C313
287	C09038C787E0390FCE07F09038DC03F813F813F0A313E0AF3AFFFE3FFF80A3211B7D9A26>I<EB
288	3FE03801FFFC3803F07E390FC01F80391F800FC0003F14E0EB00074814F0A34814F8A86C14F0A2
289	393F800FE0A2001F14C0390FC01F803907F07F003801FFFC38003FE01D1B7E9A22>I<38FFE3FE
290	9038EFFFC09038FF0FF0390FFC03F89038F001FC01E07F140081A2ED7F80A9EDFF00A25DEBF001
291	4A5A6D485A9038FE0FE09038EFFFC0D9E3FEC7FC01E0C8FCA9EAFFFEA321277E9A26>I<38FFC7
292	F0EBCFFCEBDC7E380FD8FF13F85BA3EBE07E1400AFB5FCA3181B7E9A1C>114
293	D<3803FE70381FFFF0EA3E03EA7801EA700000F01370A27E00FE1300EAFFF013FF6C13C06C13E0
294	6C13F0000713F8C613FC1307130000E0137C143C7EA26C13787E38FF01F0EBFFC000E11300161B
295	7E9A1B>I<1370A413F0A312011203A21207381FFFF0B5FCA23807F000AD1438A73803F8703801
296	FCF03800FFE0EB3FC015267FA51B>I<39FFE03FF8A3000F1303B11407A2140F0007131F3A03F8
297	3BFF803801FFF338007FE3211B7D9A26>I<39FFFC0FFFA33907F003C06C6C485AEA01FC6C6C48
298	C7FCEBFF1E6D5AEB3FF86D5A130FA2130780497E497E131EEB3C7F496C7E496C7ED801E07FEBC0
299	0F00036D7E3AFFF01FFF80A3211B7F9A24>120 D<3AFFFE03FF80A33A07F0007000A26D13F000
300	035CEBFC0100015CA26C6C485AA2D97F07C7FCA2148FEB3F8E14DEEB1FDCA2EB0FF8A36D5AA26D
301	5AA26D5AA2495AA2EA3807007C90C8FCEAFE0F130E131E5BEA7C78EA3FE0EA0FC021277F9A24>
302	I E /Ff 27 119 df<127012F812FCA2127C120CA3121C1218A21238127012E0A2060F7C840E>
303	59 D<EC01C0A21403A21407140FA2141B811431A2146114C1A2EB0181A2EB030113071306010C
304	7FA2EB1800EB3FFFA2EB6000A25BA2485A48C7FC5A81121F3AFFC00FFF80A221237EA225>65
305	D<017FB512C090B6FC903807800F1503010F130114001680A25B90381E0181A21403013E90C7FC
306	EB3C075CEB3FFF495AEB781E140EA2EBF80C01F013035DEC0006120149130E150C151C00035C49
307	137815F80007EB07F0007FB5FCB65A22227EA124>69 D<D97FE0EB03FF13FF0107EC07E0160F13
308	0F010DEC1BC0A21637011D146701191580D918F013C716CF0138EB018F01309038030F00A2ED06
309	1F13700160EB0C1E15180278133E01E0133001C0143C1560EDC07C1201903980798078A291387B
310	00F80003137ED9003E5B48133CD80F8013013A7FF0381FFF00FFEB303F30227EA12F>77
311	D<90387FFFF090B512FC903807803E010F130F1680EC0007A25B150F131EA2013E14005D013C13
312	1E5D017C5B4A5A90387FFFC092C7FC01F8C8FCA25BA21201A25BA21203A25BA21207EA7FFC12FF
313	21227EA11F>80 D<90387FFFE090B512FC903807803E150F010F1480EC0007A349130F131EA2ED
314	1F00013E131E013C5B5D4A5A90387FFFC092C7FC9038780F80EC03C013F8EBF001811403120113
315	E0A21407120301C0EBC0C015E0000714E13A7FFC03E38000FF903801FF00C85A22237EA125>82
316	D<3A3FFE03FF80007F5B3A03C000FC0000071470A2491360A2000F14E05D90C7FCA24813015D12
317	1EA2003E130392C7FC123CA2007C5B14061278A2140E00F8130C5A141C00705B1430007813705C
318	383C03C0381F0F80D80FFEC8FCEA03F821237DA121>85 D<90397FFC07FFA2903907E003F89039
319	03C001C09138E003800101EB0700ECF0065D01005B6E5AEC7860EC7CC0EC7D80143F92C7FC141E
320	141FA25CEC6F8014C790380187C0EB03031307010E7FEB1C0101387FEB3000497F485A00031478
321	000F14FC3AFFF003FFC05C28227FA128>88 D<EBFCE0EA03FEEA07CFEA0F07381E03C0A2123C12
322	7C00781380A2130712F800F01300140C130F1418EA701EEB3E383878FF30383FE7F0380F83E016
323	157E941A>97 D<EA07C0123F5B1207A390C7FCA35A120EA3121EEA1CFCEA1FFE138FEA3F07003E
324	1380123C123812781270A2130F00F0130012E0A2131EA25BEA7078EA78F0EA3FE0EA1F8011237D
325	A215>I<137F3801FFC0EA03E1EA0F831303121E48C7FCA25AA312F85AA314C0EA7801EB038038
326	3C1F00EA1FFEEA07F012157E9415>I<143EEB01FE14FCEB003CA31438A21478A21470A214F0A2
327	EBFCE0EA03FEEA07CFEA0F07381E03C0A2123C127C00781380A2130712F800F01300140C130F14
328	18EA701EEB3E383878FF30383FE7F0380F83E017237EA219>I<13FEEA03FF380F8380EA1F0112
329	3C127CEA780338F81F00EAFFFE13F000F0C7FCA25AA3EB0180EAF00338700700EA7C3EEA3FFCEA
330	0FE011157D9417>I<143FEC7F8014E7EB01C71500EB03C05CA3130791C7FCA4EBFFF8A2010EC7
331	FCA4131E131CA4133C1338A513781370A313F05BA3485A127112F1EAF380B4C8FC127E192D7EA2
332	18>I<EB1F9CEB7FDCEBF9FCEA01E03803C078A2EA0780120FEB0070A214F05A001E13E0A21301
333	A2380E03C01307EA0F1FEA07FF3801F380EA00031307A214005BEA700EEAF01E137CB45AEA7FC0
334	161F809417>I<EA01F0120F5B1201A35BA21203A25BA21207A2EB1F80EB7FC0EA0FF1EBC1E013
335	801300EA1E0114C0121CA2EA3C0314801238EB07860078130E140CEA700FEB0E1C38F00F38EB07
336	F038E003E017237DA21C>I<13381378A31300A9EA0F80EA1FC0EA3DE0123012701261EAE1C012
337	011203138012071300A2EA0F0CEA0E1C1318121EEA1C38EA1E70EA0FE0EA07C00E2280A111>I<
338	14E01301A390C7FCA9133E137FEBE780EA01C3EA03831303EA070712001400A25BA2130EA2131E
339	A2131CA2133CA21338A21378A2137013F0EA70E012F1EAF3C0B45A007EC7FC132C81A114>I<EA
340	03E0121F13C01203A31380A21207A21300A25AA2120EA2121EA2121CA2123CA21238A21278A212
341	70EA718012F112F3EAE300A212F7127E123E0B237DA20F>108 D<381F03F8383F8FFC383BDE3C
342	3871F81E3861F00E13E000E3131E3803C01CA213800007133C14381300EC786048EB70E015C000
343	0E13F014E1001EEBF380EC7F00001C133E1B1580941D>110 D<137F3801FF803803C3C0380F81
344	E0381F00F0121E5AA25AA2130100F813E012F0130314C013070070138038781F00EA3C3EEA1FF8
345	EA0FE014157E9417>I<3807C1F8380FE7FC380EFF1E381C7E0E38187C0F1378EA38F0120013E0
346	A20001131F141E13C0A20003133CA21478EBE0F03807F1E0EBFFC0EB3F0090C7FC5AA2120EA212
347	1EA2121CEAFFC0A2181F819418>I<381F07E0383F9FF0383BFC70EA71F83861F0F013E038E3C0
348	E0000313005BA21207A290C7FCA25AA2120EA2121EA2121C1415809416>114
349	D<137E3801FF80EA03C3EA07871307A2EB0300138013F813FE6C7EC67EEB0F801307127000F013
350	00A2485AEAF03EEA7FF8EA1FE011157E9417>I<136013E0A4120113C0A31203EAFFFCA2EA0380
351	12071300A35A120EA3121E121C130C131CEA3C18EA38381370EA3CF0EA1FE0EA0F800E1F7F9E12
352	>I<380F800EEA1FC0383DE01E12300070131C126138E1C03C120100031338138014781207EB00
353	7015C014F0ECF180EB01E1EB03E3903887F3003803FE7F3801F83E1A1580941C>I<380F803838
354	1FC07CEA3DE012300070133C0061131CEAE1C00001131812031380143800071330130014701460
355	14E0EB01C0EB818013C73803FF00EA00FC1615809418>I E /Fg 79 124
356	df<90381FC3F090387FEFF89038F0FE783801C0FC380380F800071400EB0070A8B612C0A23907
357	007000B1397FE3FF80A21D2380A21C>11 D<EB0FE0EB7FF0EBF878EA01E0EA03C0EA0780EB0030
358	91C7FCA7B512F8A2380700781438B0397FE1FF80A2192380A21B>I<EB0FF8137FEBF878EA01E0
359	EA03C0380780381300A8B512F8A238070038B1397FF3FF80A2192380A21B>I<90390FE03F8090
360	397FF9FFC09039F83BE1E03901E03F81D803C013013807803E9039003C00C0021C1300A7B712E0
361	A23907001C011500B03A7FF1FFCFFEA2272380A229>I<EA7038EAF87CEAFC7EA2EA7C3EEA0C06
362	A3EA1C0EEA180CA2EA381CEA7038EAE070A20F0F7EA218>34 D<127012F812FCA2127C120CA312
363	1C1218A21238127012E0A2060F7CA20E>39 D<137013E0EA01C0A2EA0380EA0700120EA25AA25A
364	A35AA4126012E0AE12601270A47EA37EA27EA27EEA0380EA01C0A2EA00E013700C327DA413>I<
365	12E012707EA27E7E7EA2EA0380A2EA01C0A3EA00E0A413601370AE136013E0A4EA01C0A3EA0380
366	A2EA0700A2120E5A5AA25A5A0C327DA413>I<127012F812FCA2127C120CA3121C1218A2123812
367	7012E0A2060F7C840E>44 D<EAFFE0A30B037F8B10>I<127012F8A3127005057C840E>I<EB0180
368	A213031400A25B1306A2130E130CA2131C1318A313381330A213701360A213E05BA212015BA212
369	0390C7FCA25A1206A2120E120CA3121C1218A212381230A212701260A212E05AA211317DA418>
370	I<EA01F0EA07FCEA0E0E487E38380380A2007813C0EA7001A300F013E0AE007013C0A3EA780300
371	381380A2381C0700EA0E0EEA07FCEA01F013227EA018>I<EA01801203120F12FF12F31203B3A8
372	EAFFFEA20F217CA018>I<EA03F8EA0FFEEA3C3F38380F80387007C0126038E003E012F8A21301
373	A2EA7003120014C01307A2EB0F801400131E5B5B5B5B485A485A38070060120E5A4813E04813C0
374	B5FCA313217EA018>I<EA03F8EA0FFEEA1E1F38380F80387007C01278127C1278A21200A21480
375	130FEB1F00133EEA03FC5BEA001E7FEB078014C0EB03E0A2127012F8A438E007C0127038780F80
376	383E1F00EA0FFEEA03F813227EA018>I<130EA2131EA2133EA2136E13EE13CE1201138EEA030E
377	12071206120E120C1218A212301270126012E0B512F8A238000E00A73801FFF0A215217FA018>
378	I<38180180EA1E07EA1FFF140013FC13F00018C7FCA6EA19F8EA1FFE130F381E0780381C03C012
379	18EA000114E0A4127012F0A338E003C0A238700780EA380F383E1F00EA0FFCEA07F013227EA018
380	>I<137E3801FF803803C3C0EA0703120E121E123C0038C7FC1278A3EA7020EAF3FCEAF7FF38FE
381	0F80EAFC0738F803C0A2EB01E012F0A51270A2127814C0EA3803003C1380EA1E07380F1F00EA07
382	FEEA03F813227EA018>I<12601270387FFFE0A3386001C000E01380EAC003EB07001306EA000E
383	130C131C5B13301370A25BA31201A25BA31203AA13237DA118>I<EA03F8EA0FFEEA1F1F383C07
384	80EA3803007013C01301A31278EA7C03383E0780383F8700EA1FDEEA0FFC6C5A13FE487E381E3F
385	80383C1FC0EA7807387003E0EAF00112E01300A37E387001C0EA7803383C0780381E0F00EA0FFE
386	EA03F813227EA018>I<EA03F8EA0FFCEA1F1EEA3C0700381380EA7803007013C012F01301A214
387	E0A513031278A2EA3C07EA3E0FEA1FFDEA07F9EA0081EB01C01303A21480EA780714005B131E13
388	7CEA3FF8EA0FE013227EA018>I<127012F8A312701200AB127012F8A3127005157C940E>I<1270
389	12F8A312701200AB127012F8A312781218A4123812301270A212E012C0051F7C940E>I<B612FE
390	A2C9FCA8B612FEA21F0C7D9126>61 D<497E497EA3497EA3497E130CA2EB1CF8EB1878A2EB383C
391	1330A2497EA3497EA348B51280A2EB800739030003C0A30006EB01E0A3000EEB00F0001F130139
392	FFC00FFFA220237EA225>65 D<B512F814FE3907800F80EC07C0EC03E0140115F0A515E01403EC
393	07C0EC0F8090B512005C9038801F80EC07C0EC03E0EC01F0140015F8A6EC01F0140315E0EC0FC0
394	B6120014FC1D227EA123>I<90380FF030EB7FFC9038FC1E703803F0073907C003F0380F8001EA
395	1F001400123E003C1470127CA215305AA21500A71530127CA36C147015606C14E015C0380F8001
396	3907C003803903F007003800FC1EEB7FFCEB0FF01C247DA223>I<B512F014FE3807801FEC07C0
397	1403EC01E0EC00F015F81578157C153CA3153EA9153CA2157C1578A215F0EC01E01403EC07C0EC
398	1F00B512FE14F81F227EA125>I<B612C0A23807800F14031401140015E0A215601460A3150014
399	E0138113FFA2138113801460A21518A214001530A4157015F01401EC07E0B6FCA21D227EA121>
400	I<B612C0A23807800F14031401140015E0A21560A21460A21500A214E0138113FFA21381138014
401	60A491C7FCA8EAFFFEA21B227EA120>I<90380FF018EB3FFC9038FC0F383903F003B83907C001
402	F8380F800090C7FC481478123E15385AA215185AA21500A6EC1FFFA2007CEB0078A37EA27E6C7E
403	7F6C6C13F83803F0013900FE079890383FFF1890380FF80020247DA226>I<39FFFC3FFFA23907
404	8001E0AD90B5FCA2EB8001AF39FFFC3FFFA220227EA125>I<EAFFFCA2EA0780B3ACEAFFFCA20E
405	227EA112>I<3803FFF0A238000F00B3A612F8A35BEAF01EEA703EEA787CEA3FF8EA0FE014237E
406	A119>I<39FFFC07FFA239078003F8EC01E04A5A4A5A92C7FC140E5C5C5C5CEB81C013831387EB
407	8FE0EB9DF013BDEBF8F8EBF078EBE07C497EEB801E141F6E7EA26E7E6E7EA26E7EA215FC3AFFFC
408	07FF80A221227EA126>I<EAFFFEA2EA0780B3EC0180A41403A215005CA25C143FB6FCA219227E
409	A11E>I<D8FFC0EB03FF6D5B000715E0A2D806F0130DA301781319A36D1331A36D1361A36D13C1
410	A29038078181A3903803C301A3EB01E6A3EB00FCA31478EA1F80D8FFF0EB3FFF143028227EA12D
411	>I<39FF800FFF13C03907E001F8EC00607F12067F137C133C133E131E131FEB0F80130714C013
412	0314E0EB01F0130014F8147CA2143E141E141FEC0FE0A214071403A21401EA1F8038FFF0001560
413	20227EA125>I<EB0FE0EB7FFCEBF83E3903E00F8039078003C0390F0001E0A2001EEB00F0003E
414	14F8003C1478007C147CA20078143CA200F8143EA9007C147CA3003C1478003E14F8001E14F06C
415	EB01E0EB80033907C007C03903E00F803900F83E00EB7FFCEB0FE01F247DA226>I<B512F014FC
416	3807803FEC0F801407EC03C0A215E0A515C0A2EC0780140FEC3F00EBFFFC14F00180C7FCADEAFF
417	FCA21B227EA121>I<B512E014F83807803E140F6E7E816E7EA64A5A5D4AC7FC143EEBFFF85CEB
418	80F8143C80A280A381A4ED818015C1EC07C3D8FFFCEBE7006EB4FCC85A21237EA124>82
419	D<3807F060EA0FFE381E1FE0EA3807EA70031301EAE000A21460A27E14007E127C127FEA3FF0EA
420	1FFE380FFF80000313C0EA007FEB07E0130114F01300A200C01370A37E14F06C13E0EAF80100FC
421	13C038FF078038C7FF00EAC1FC14247DA21B>I<007FB512F8A2387C07800070143800601418A2
422	00E0141C00C0140CA500001400B3A20003B5FCA21E227EA123>I<39FFFC0FFFA239078001F8EC
423	0060B3A515E06C6C13C01401D801E0138014033900F80700EB7C1EEB1FFCEB07F020237EA125>
424	I<D8FFF0EBFFC0A2D80F80EB3E00151C00071418A26C6C5BA36C6C5BA26D13E000005CA2EBF801
425	01785BA26D48C7FCA3EB1E06A2EB1F0EEB0F0CA2149CEB0798A2EB03F0A36D5AA36D5A22237FA1
426	25>I<3BFFF03FFC07FEA23B1F8007C001F8260F0003EB00E0A2D807806D13C0A33B03C007F001
427	801406A216032701E00C781300A33A00F0183C06A3903978383E0CEC301EA2161C90393C600F18
428	A390391EC007B0A3010F14E0EC8003A36D486C5AA32F237FA132>I<397FF807FFA23907E003F0
429	00036D5A00015C6C6C485A01F890C7FCEB7806EB7C0EEB3E0CEB1E18EB1F38EB0FB0EB07E0A213
430	031301497E80EB0778EB0E7CEB0C3EEB1C1EEB181F496C7EEB700701607F496C7E00011301D803
431	807F00071300390FC001FC3AFFE007FFC0A222227FA125>I<D8FFF0EBFFC0A2D80F80EB3E0000
432	07143C6D13386C6C133000015C6D13E000005CEBF801017C5BD93C03C7FCEB3E07EB1E06EB1F0C
433	EB0F8CEB079814F86D5A5C1301ACEB3FFFA222227FA125>I<12FEA212C0B3B3A912FEA207317B
434	A40E>91 D<EA1C0EA2EA381CEA7038EA6030A2EAE070EAC060A3EAF87CEAFC7EA2EA7C3EEA381C
435	0F0F7AA218>I<12FEA21206B3B3A912FEA207317FA40E>I<EA1FF0EA3FFCEA3C3E130FA2C67EA2
436	5BEA03FF121FEA3F07127C12F8A200F01318A2130FEAF81F387C3FB8383FF3F0381FC3C015157E
437	9418>97 D<120E12FEA2121E120EAAEB3FC0EBFFE0380FE1F0EB8078EB003C120E141EA8143CA2
438	000F137CEB80F8EBE1F0380CFFE0EB3F8017237FA21B>I<EA03FE380FFF80EA1F07123E123C48
439	C7FCA25AA7127814C0EA3C01003E1380EA1F87380FFF00EA03FC12157E9416>I<14E0130FA213
440	011300AAEA03F8EA0FFEEA1F0FEA3E03EA7C01EA7800A25AA71270EA7801A2EA3C03381F0FF038
441	0FFEFEEA03F017237EA21B>I<EA01FCEA07FF381F0F80383E03C0EA3C01007813E0A2B5FCA200
442	F0C7FCA5127814606C13E0383E01C0EA0F833807FF00EA01FC13157F9416>I<133E13FFEA01EF
443	EA03CF138FEA0700A9EAFFF8A2EA0700B1EA7FF8A2102380A20F>I<14F03803FBF83807FFB838
444	0F1F38381E0F00383C0780A7381E0F00EA1F1E13FCEA1BF80018C7FCA2121CEA1FFF6C13C0003F
445	13F0EA7C013870007812F0481338A36C1378007813F0383F07E0381FFFC03803FE0015217F9518
446	>I<120E12FEA2121E120EAAEB3F80EBFFE0EA0FE1EB80F0EB0070A2120EAD38FFE7FFA218237F
447	A21B>I<121E123EA3121EC7FCA8120E12FEA2121E120EAFEAFFC0A20A227FA10E>I<EA01C0EA03
448	E0A3EA01C0C7FCA8EA01E0120FA212011200B3A412F113C012F3EAFF80EA3E000B2C82A10F>I<
449	120E12FEA2121E120EAAEB0FFCA2EB07E014801400131E5B5B13F8EA0FFCA2131EEA0E0F148013
450	07EB03C014E0130114F038FFE3FEA217237FA21A>I<120E12FEA2121E120EB3ABEAFFE0A20B23
451	7FA20E>I<390E3FC0FF26FEFFF313C039FFE0F7833A1F807E01E0390F003C00A2000E1338AD3A
452	FFE3FF8FFEA227157F942A>I<380E3F8038FEFFE0EAFFE1381F80F0380F0070A2120EAD38FFE7
453	FFA218157F941B>I<EA01FCEA07FF380F0780381C01C0383800E0007813F00070137000F01378
454	A700701370007813F0003813E0381C01C0380F07803807FF00EA01FC15157F9418>I<380E3FC0
455	38FEFFE038FFE1F0380F80F8EB007C000E133C143E141EA6143E143CA2000F137CEB80F8EBE1F0
456	380EFFE0EB3F8090C7FCA8EAFFE0A2171F7F941B>I<3803F860EA0FFEEA1F0F383E03E0EA7C01
457	1278130012F85AA612781301EA7C03EA3E07EA1F0FEA0FFCEA03F0C7FCA8EB0FFEA2171F7E941A
458	>I<EA0E7EEAFEFFEAFFEFEA1F8FEA0F0F1300A2120EACEAFFF0A210157F9413>I<EA1FD8EA3FF8
459	EA7878EAF038EAE018A212F0EAF800EA7F8013E0EA1FF0EA03F8EA007CEAC03C131C12E0A2EAF0
460	3CEAF878EAFFF0EACFE00E157E9413>I<1206A5120EA3121E123EEAFFF8A2EA0E00AA130CA5EA
461	0F1CEA073813F8EA03E00E1F7F9E13>I<000E137038FE07F0A2EA1E00000E1370AB14F0A21301
462	380787F8EBFF7FEA01FC18157F941B>I<38FFC3FEA2381E00F8000E137014E06C13C0A3380381
463	80A213C300011300A2EA00E6A3137CA31338A217157F941A>I<39FF8FF9FFA2391E01E07C391C
464	03C038000EEBE030A2EB06600007EB7060A2130E39038C30C01438139C3901D81980141DA2EBF0
465	0F00001400A2497EEB600620157F9423>I<387FC1FFA2380781F8000313E03801C1C014803800
466	E3001377133E133C131C133E13771367EBC3803801C1C0380380E0000713F0001F13F838FFC1FF
467	A2181580941A>I<38FFC3FEA2381E00F8000E137014E06C13C0A338038180A213C300011300A2
468	EA00E6A3137CA31338A21330A213701360A2EAF0C012F1EAF380007FC7FC123E171F7F941A>I<
469	383FFFC0A2383C0780EA380F00301300EA701EEA603C5B13F8C65A485A3803C0C012071380EA0F
470	00EA1E01003C1380EA7C03EA7807B5FCA212157F9416>I<B512FEA21702808D18>I
471	E /Fh 32 122 df<B512F0A714077F931B>45 D<EB01E01303130F137FEA1FFFB5FCA213BFEAE0
472	3F1200B3AF007FB512F0A41C2E7AAD29>49 D<EB3FF00003B5FC4814C0001F14E0D83F8113F039
473	7E003FF8007FEB1FFC39FF800FFEEBC00715FF80A3EA7F80EA3F00C7FCA2EC07FEA2EC0FFC15F8
474	141F15F0EC3FE0EC7FC0ECFF005C495AEB03F0495A90380FC00FEB1F80EB3E0049131F49131E48
475	5AD803C0133E48B512FE5A5A5A5AB612FCA4202E7CAD29>I<EB1FFC90387FFF8048B512E03903
476	F83FF03907C00FF8D80FE07F381FF00701F87FA5EA0FF0D807E05B3801800FC75BA24A5A4A5AEC
477	FFC0011F90C7FC5CECFFC09038001FF0EC0FFC6E7E6E7E16808016C0120EEA3F80EA7FC0EAFFE0
478	A316805CA26C4848130001805B393FE01FFC6CB55A00075C0001148026003FFCC7FC222E7DAD29
479	>I<15F81401A214031407140F141F143FA2147F14F71301EB03E714C7EB0787EB0F07131E133E
480	137C137813F0EA01E01203EA07C01380EA0F00121E5A127C5AB712F0A4C7380FF800A8010FB512
481	F0A4242E7EAD29>I<157CA215FEA34A7EA24A7FA24A7FA34A7F157F021F7FEC1E3FA2023E7FEC
482	3C1F027C7FEC780FA202F87FECF0070101804A7EA20103814A7E0107814A7EA249B67EA24981A2
483	011EC7123F4981161F017C810178140FA2496E7EA2000182B5D8C001B512FEA437317DB03E>65
484	D<B712F816FF17E083C6903980003FF8EE0FFC707E8382188082A55E1800A24C5A4C5A4C5AEEFF
485	E091B6128094C7FC17E0913980001FF8EE07FE707E701380A27013C0A218E0A718C05E18805E04
486	0F1300EE3FFEB85A17F017C04CC7FC33317EB03B>I<913A07FF800380027FEBF8070103B5EAFE
487	0F010FECFF9F499038803FFF90397FFC0007D9FFE07F484913004890C8127F4848153F120F4848
488	151F49150F123F5B1707127FA24992C7FC12FFAB127F7FEF0780123FA27F001F160F6D16006C6C
489	5D0007161E6C6C153E6C01C05C6C01F0495AD97FFCEB07F0903A1FFF803FE06D90B55A010392C7
490	FCD9007F13FC020713C031317BB03C>I<B712F016FF17C017F0C69039C0007FFCEE0FFEEE03FF
491	7013807013C0EF7FE0173F18F0171F18F8A2EF0FFCA418FEAB18FCA418F8171FA2EF3FF018E017
492	7FEFFFC04C13804C1300EE0FFEEE7FFCB812F05F94C7FC16F037317EB03F>I<B812F0A4C69038
493	C0007FEE0FF816031601A216001778A4923807803CA41700150F151F153F91B5FCA4ECC03F151F
494	150F1507A592C8FCABB612F0A42E317EB034>70 D<B612C0A4C6EBC000B3B3A5B612C0A41A317E
495	B01F>73 D<B712C016FCEEFF8017E0C6D9C0007FEE3FF8EE0FFC707E838284A695C7FCA24C5AA2
496	4C5AEE3FF8923801FFE091B6128004FCC8FC829139C007FF8003017F6F7F707E163F83161FA483
497	A4F001E017FEA21803EE0FFFB6D8C007EB87C070EBFF8004001400EF1FFC3B317EB03E>82
498	D<90393FF8038048B512074814CF000F14FF381FF00FEBC00148487E48C7123F007E141FA200FE
499	140FA215077E7F6D90C7FC7F13FE387FFFE014FF6C14E0816C14FC6C806C807EC61580011F14C0
500	1300140F020013E0157F153F151F12F0150FA37E16C06C141F6C15806C143F01C0EB7F009038FC
501	01FE90B55A00F95CD8F07F13E0D8E007138023317BB02E>I<B5D8FE07B5D8F803B5FCA4000390
502	2780000FFCC7EA07C06C1A80707E6E170F6C701500826D6C171E4C7F6E173E013F4A6D133CA26E
503	177C011F4A6D1378EE1E7F6D6C5F043E7F6ED93C3F13010107027C01F85BEE781F6E16036D02F8
504	01FC5BEEF00F6D01804B5A923981E007FE03C1150F6D01C302FF90C7FC4C7E03E35DDA7FE7159E
505	4C6C13BEDA3FF715BC03FFC713FCA26E5E4B147FA2020F5E4B143F02075E4B141FA202035E4B14
506	0F02015E4B140750317EB055>87 D<EBFFFC0007EBFF804814E0391FE03FF09038F00FF86E7E14
507	036E7EEA0FE0A2EA0100C7FCA2EB01FF133F3801FFF93807FE01EA1FF8EA3FE0EA7FC0138012FF
508	1300A3EB800314076C6C487E263FF03E13F8381FFFFC0007EBF07FC6EB801F25207E9F28>97
509	D<EA01F812FFA4120F1207ACEC1FF891B5FC01FB14809039FFE07FE09138801FF09039FE0007F8
510	5B49EB03FC16FEA2150116FFAA16FE150316FC7FED07F86DEB0FF09038FF801F9039EFE07FC001
511	E3B5128001C0EBFE009038803FF028327EB12E>I<90380FFF80017F13F048B512F83903FE03FC
512	3807F807EA0FF0EA1FE0EA3FC0EC03F8127F903880004000FF1400AA6C7EA2003F141E7F001F14
513	3E6C6C137CD807FC13F83903FF03F06CEBFFE06C6C138090380FFE001F207D9F25>I<ED07E0EC
514	03FFA4EC003F151FACEB0FFC90387FFF9F48B6FC3803FE07380FF8004848137F49133F4848131F
515	A2127F5B12FFAA127F7FA2003F143F6C6C137F15FF260FF80113F02607FE0F13FF0001B512DF6C
516	141FEB1FF828327DB12E>I<EB0FFE90387FFFC048B512F03903FE0FF8390FF803FC48486C7EEB
517	E000003F147F485A811680485AA390B6FCA30180C8FCA46C7EA2003FEC07807F001F140F6C6C13
518	1FD807FCEB3F003903FF01FEC6EBFFF8013F13E0010790C7FC21207E9F26>I<ECFF80010713E0
519	011F13F0EB7FC79038FF8FF848130F13FE120313FCEC07F0EC01C091C7FCA7B512F8A4D803FCC7
520	FCB3A6387FFFF0A41D327EB119>I<EA03C0EA0FF0487EA27FA35BA26C5AEA03C0C8FCA8EA01F8
521	12FFA4120F1207B3A4B51280A411337DB217>105 D<EA01F812FFA4120F1207B3B3A4B512C0A4
522	12327DB117>108 D<2703F00FFCEB1FF800FFD93FFFEB7FFE91B500C1B51280903BF1F83FC3F0
523	7F903CF3C01FE7803FC0260FF780EBEF0000079026000FFEEB1FE001FE5C495CA2495CB2B500C1
524	B50083B5FCA440207D9F47>I<3903F00FFC00FFEB3FFF91B512C09038F1F83F9039F3C01FE038
525	0FF7800007496C7E13FE5BA25BB2B500C1B51280A429207D9F2E>I<EB07FE90383FFFC090B512
526	F03903FC03FC3907F000FE4848137F4848EB3F80003F15C0A24848EB1FE0A300FF15F0A8007F15
527	E0A36C6CEB3FC0A26C6CEB7F80000F15003907F801FE3903FE07FC6CB55AD8003F13C0D907FEC7
528	FC24207E9F29>I<3901F81FF800FF90B5FC01FB14809039FFE07FE09138801FF03A07FE000FF8
529	4913074914FCED03FEA3ED01FFA95D16FEA216FC6D1307ED0FF86D14F09038FF803F9138E0FFC0
530	01FBB5128001F8EBFE00EC3FF091C8FCAAB512C0A4282E7E9F2E>I<3903F03F8000FFEBFFE001
531	F113F0EBF3E79038F78FF8000F130FEA07FEA29038FC07F0A2EC008015005BB0B512E0A41D207E
532	9F22>114 D<3801FFC7000713FF121FEA3F80387C003F805A807E7E6C6CC7FC13FC387FFFE014
533	F86C7F6C7F6C7F00031480EA003F010013C0143F00F0130FA26C1307A27E6CEB0F806C131F9038
534	C07F00EBFFFE00FB13F800E013E01A207D9F21>I<1378A513F8A41201A212031207120F381FFF
535	FEB5FCA33807F800AF140FA7141F3803FC1EEBFE3E3801FFFC38007FF8EB1FE0182E7EAD20>I<
536	D801F8EB03F000FFEB01FFA4000FEB001F0007140FB1151FA2153F157F6C6C497E903AFE03EFFF
537	806CB512CF6C6C130FEB1FFC29207D9F2E>I<B5EBFFFCA4D803FCEB3E006C6C137E6C6C5B6E5A
538	90387FC1F090383FC3E090381FE7C06DB45A6D90C7FCA26D5A13016D7E497F497F497F90380FDF
539	F0EB1F8FEC07F890383E03FC496C7E01F87F48486C13800003EC7FC03AFFFC01FFFEA427207E9F
540	2C>120 D<B538803FFEA43A07F80003C06D1307000315806D130F000115006D5B6C141EA26D6C
541	5AA2ECC07C013F1378ECE0F8011F5B14F1010F5B14F3903807FBC0A214FF6D5BA26D90C7FCA26D
542	5AA2147CA21478A214F85CEA3C01007E5BEAFF035C495A130FD87A3FC8FCEA7FFC6C5AEA0FE027
543	2E7E9F2C>I E /Fi 37 123 df<EB1F80EBFFC03801F1E0EA03C1EA0781130190C7FCA6B512E0
544	A2EA0700B0387FC3FEA21720809F19>12 D<13E0EA01C012031380EA0700120EA25AA25AA21230
545	1270A3126012E0AE12601270A312301238A27EA27EA27EEA038013C01201EA00E00B2E7DA112>
546	40 D<12E01270127812387E7EA27EA2EA0380A2120113C0A3120013E0AE13C01201A313801203
547	A2EA0700A2120EA25A5A127812705A0B2E7DA112>I<127012F812FCA2127C120CA3121C121812
548	38127012F01260060E7C840D>44 D<127012F8A3127005057C840D>46 D<EB0380A3497EA3EB0D
549	E0A3EB18F0A3EB3078A3497EA3EBE01E13C0EBFFFE487FEB800FA200031480EB0007A24814C014
550	03EA0F8039FFE03FFEA21F207F9F22>65 D<B512E014F83807803E80801580A515005C143E5CEB
551	FFF880EB801E801580140715C0A51580140FEC1F00143EB512FC14F01A1F7E9E20>I<90381FC0
552	C0EBFFF03801F83D3807E00F380F80071300481303003E1301123C127C1400A25A1500A8007C14
553	C0A3003C1301003E14807E6C130390388007003807E00E3801F83C3800FFF8EB1FE01A217D9F21
554	>I<EB1F80EBFFF03801E0783807C03E48487E497E001EEB078048EB03C0A2007C14E0A2007813
555	0100F814F0A9007814E0007C1303A2003C14C0003E1307001E14806CEB0F006D5A3807C03E3801
556	F0F86CB45AEB1F801C217D9F23>79 D<B57E14F0380780F8143C143E141E141FA4141E143E143C
557	14F8EBFFF014C0EB81E0EB80F0A21478A4147CA3150C147EEC3E1C38FFFC3FEC1FF8C7EA07F01E
558	207E9E21>82 D<007FB512E0A238780F010070130000601460A200E0147000C01430A400001400
559	B23807FFFEA21C1F7E9E21>84 D<3BFFF07FF83FF0A23B1F000F800F806C0107EB0300A23A0780
560	0FC006A3913819E00ED803C0140CA214393A01E030F018A33A00F0607830A3ECE07C903978C03C
561	60A390393D801EC0A390383F000F6D5CA3010E6DC7FCA32C207F9E2F>87
562	D<EA3FE0EA7FF8EA787C131EA2EA000EA3EA07FE121FEA3F0E127C12F800F01330A2131E12F838
563	7C7F70383FFFE0381FC78014147E9317>97 D<120E12FEA2120EA9133FEBFFC0380FC3E01381EB
564	00F0120E1478A814F0120FEB81E0EBC3C0380CFF80EB7F0015207F9F19>I<EA03FCEA0FFEEA1E
565	1E123C127813005AA77E1278EA7C03EA3E07EA1F0EEA0FFCEA03F010147E9314>I<EB0380133F
566	A21303A9EA07F3EA0FFFEA1E1FEA3C071278130312F0A812781307EA3C0FEA3E1F381FFBF8EA07
567	E315207E9F19>I<EA03F0EA0FFCEA1E1E487E487E148012F01303B5FCA200F0C7FCA37E127838
568	7C0180EA3E03381F8700EA0FFEEA03F811147F9314>I<137E13FFEA01EFEA038F12071300A7EA
569	FFF0A2EA0700B0EA7FF0A21020809F0E>I<EB01E03807F7F0380FFF70EA3E3E383C1E00487EA6
570	EA3C1EEA3E3EEA3FF8EA37F00030C7FCA21238EA3FFE381FFFC04813E0EA780338F000F0481370
571	A36C13F0387801E0383E07C0381FFF803803FC00141F7F9417>I<120E12FEA2120EA9137FEBFF
572	80380FC7C013831301A2120EAC38FFE7FCA216207F9F19>I<121E123EA3121EC7FCA6120E127E
573	A2120EAFEAFFC0A20A1F809E0C>I<120E12FEA2120EA9EB1FF0A2EB0F801400131E5B5B5B120F
574	7F13BC133CEA0E1E7FA2EB0780A2EB03C038FFCFF8A215207F9F18>107
575	D<120E12FEA2120EB3A9EAFFE0A20B20809F0C>I<390E3F03F039FEFFCFFC39FFC3DC3C390F81
576	F81E903800F00EA2000E13E0AC3AFFE7FE7FE0A223147F9326>I<EA0E7F38FEFF8038FFC7C0EA
577	0F831301A2120EAC38FFE7FCA216147F9319>I<EA01F8EA07FE381E0780383C03C0EA38013870
578	00E0A200F013F0A6007013E0EA7801003813C0EA3C03381E07803807FE00EA01F814147F9317>
579	I<EA0E3F38FEFFC038FFC3E0EA0F81EB01F0EA0E0014F81478A614F814F0EA0F01EB81E0EBC7C0
580	380EFF80EB7F0090C7FCA7EAFFE0A2151D7F9319>I<3807F180EA0FF9EA1F1FEA3C0FEA7C07EA
581	780312F812F0A612F8EA7807127CEA3C0FEA3E1FEA1FFBEA07E3EA0003A7EB3FF8A2151D7E9318
582	>I<EA0E7CEAFFFE13DEEA0F9E131E1300120EACEAFFE0A20F147F9312>I<EA1FB0EA7FF01278EA
583	E0701330A2EAF00012FCEA7FC0EA3FE0EA0FF0EA00F8EAC078133812E0A2EAF078EAF8F0EAFFE0
584	EACFC00D147E9312>I<1206A4120EA2121E123EEAFFF8A2EA0E00AA1318A5EA0F30EA07F0EA03
585	E00D1C7F9B12>I<380E01C0EAFE1FA2EA0E01AC13031307EA0F0F3807FDFCEA03F916147F9319>
586	I<38FF87F8A2381E03E0380E01C01480A238070300A3EA0386A2138EEA01CCA213FC6C5AA21370
587	A315147F9318>I<39FF9FF3FCA2391C07C0F0EC80E014C0D80E0F13C0130C14E00007EBE180EB
588	186114713903987300EBB033A2143F3801F03EEBE01EA20000131CEBC00C1E147F9321>I<387F
589	C7FCA2380F03E00007138038038300EA01C7EA00EE13EC13781338133C137C13EEEA01C7138738
590	030380380701C0001F13E038FF87FEA21714809318>I<38FF87F8A2381E03E0380E01C01480A2
591	38070300A3EA0386A2138EEA01CCA213FC6C5AA21370A31360A35B12F0EAF18012F3007FC7FC12
592	3C151D7F9318>I<EA3FFFA2EA381FEA301EEA703CEA6078A213F0EA01E0EA03C0A2EA0783EA0F
593	03121E1307EA3C061278EAF81EEAFFFEA210147F9314>I E /Fj 7 117
594	df<14E0A2497EA3497EA2497EA2497E130CA2EB187FA201307F143F01707FEB601FA201C07F14
595	0F48B57EA2EB800748486C7EA20006801401000E803AFFE01FFFE0A2231F7E9E28>65
596	D<EA07FC381FFF80383F0FC01307EB03E0A2121E1200EA01FF120FEA3FC3EA7E0312FC12F8A3EA
597	FC07EA7E1F383FFDFEEA0FF017147F9319>97 D<B4FCA2121FAAEB1FC0EBFFF0EBE1F8EB807CEB
598	007E143E143FA8143E147EEB80FCEBE1F8381CFFF038183FC018207E9F1D>I<EA03FE380FFF80
599	381F8FC0EA3F0F127E127C38FC078090C7FCA7127E14606C13E0381FC3C0380FFF803803FE0013
600	147E9317>I<EAFE3FEBFF80381EEFC0EA1FCF138FA2EB078090C7FCABEAFFF0A212147E9316>
601	114 D<EA0FF6EA3FFEEA781EEAE00E130612F0EAF800EAFFC0EA7FF813FCEA1FFEEA03FFEA003F
602	EAC00FEAE007A2EAF00FEAFC1EEAFFFCEACFF010147E9315>I<EA0180A31203A31207120F123F
603	EAFFFCA2EA0F80AA1386A513CCEA07FCEA01F80F1D7F9C14>I E /Fk 53
604	122 df<131C1338137813F013E0EA01C012031380EA07005A120EA2121E121C123CA212381278
605	A31270A312F0AF1270A31278A31238123CA2121C121E120EA2120F7EEA038013C01201EA00E013
606	F013781338131C0E3D7BAC17>40 D<12E0127012787E121C7E120F7EEA038013C01201A213E012
607	0013F0A213701378A31338A3133CAF1338A31378A3137013F0A213E0120113C0A212031380EA07
608	005A120E5A123C5A12705A0E3D7DAC17>I<127C12FEA212FFA3127F1203A312071206A2120E12
609	1CA212381270126008137B8611>44 D<EAFFFEA30F037F8E14>I<127C12FEA5127C07077B8611>
610	I<137F3801FFC03807C1F0380F0078000E1338001E133C487FA3487FA400F81480AF00781400A3
611	007C5B003C131EA36C5B000E1338000F13783807C1F03801FFC06C6CC7FC19297EA71E>48
612	D<1318133813F8120712FF12F81200B3AD487E387FFFF0A214287CA71E>I<EA01FE3807FF8038
613	1F0FE0383C03F0383801F8387000FC126000FC137C6C137EA3143EA2007C137EC7FCA2147C14FC
614	14F81301EB03F014E0EB07C0EB0F80EB1F00131E5B5B5B3801E006EA03C013803807000C120E5A
615	383FFFFC5AB512F8A317287DA71E>I<EBFF80000313E03807C3F0380E00F848137C003F137E13
616	80143EA2147EA2EA1F00C7127C14FC5C1301495AEB0FC0EBFF80A2EB03E0EB00F8147C80143FA2
617	EC1F80A2123C127EB4FCA3EC3F00A2007E133E0070137E003C5B381F83F83807FFE0C613801929
618	7EA71E>I<00181318001F13F813FF14E014C01400EA1BFC0018C7FCA813FE381BFF80381F87E0
619	381E01F0381C00F81218C712FC147CA2147EA3127C12FC7EA348137C4813FC006013F812703838
620	01F0383C03E0381F0FC03807FF803801FC0017297DA71E>53 D<EB0FE0EB3FF8EBF83C3801E01C
621	3803C03E3807807EEA0F005A121E003E133C003C90C7FC127CA21278130438F87FE038F9FFF038
622	FBC0F838FF003C48133E141E48131F8015805AA41278A3127C003C14005CA26C131E6C5B6D5A38
623	07E1F03801FFE038007F8019297EA71E>I<1230123C003FB51280A34814005C3860000E5C1418
624	4813385C5CC75A1301495A91C7FC5B1306130E131E131CA2133CA2137CA2137813F8A51201A86C
625	5A192A7DA81E>I<137F3801FFE03807C1F0380F0078000E7F48131C0018131E0038130EA2123C
626	A2003E131E003F131CEBC03C381FF0786D5A6CB45A6C5B7EC67F000313F838079FFC380F0FFEEA
627	1E03486C7E486C7E0070EB3F8000F0130F481307A21403A36C140000705B007813066C130E6C13
628	3C380FC0F83803FFE0C6138019297EA71E>I<137F3803FFC03807C1F048C67E001E1378003E7F
629	487FA2127800F8131F80A31580A4141F1278127C003C133F123E001E136F380F81EF3807FFCF6C
630	130FD80010130013005CA2141E121E003F5BA25C5CEA3E01381C03E0381E0FC06CB4C7FCEA03FC
631	19297EA71E>I<49B4FC010F13E090383F01F89038F8003ED801E0130F4848EB07804848EB03C0
632	000EC812E014FE3A1C03FF80703A380FC3C03890381F01E03A701E00701C49137ED8607CEB3E0C
633	0178131E00E0150E48481406A8EAE0781260017C133ED8703CEB7E0C7F3A381F01FE1C90390FC3
634	CF383A1C03FF8FF03A0E00FE03E091C8FC6C7E6C7E6C6C143ED800F8EB03FC013FEB3FE0010FB5
635	1200010113E0272A7DA92E>64 D<1418143CA3147EA314FFA3903801BF80149FA29038030FC0A3
636	90380607E0A3496C7EA3496C7EA3496C7EA2EB3FFF497F903860007EA2497FA20001158049131F
637	A2000315C0150F1207D81FC0EB1FE026FFF801B5FCA2282A7EA92D>I<B67E15F03907F000FC00
638	03147E81ED1F80150F16C0A61680151FED3F00153E15FCEC03F890B512E015FC9038F0003EED1F
639	80ED0FC0150716E0150316F0A6ED07E0A2ED0FC0ED1F80153F0007ECFE00B65A15E024297EA82A
640	>I<9138FF8030010713E090391FC0F87090397E003CF049130ED801F013074848130348481301
641	485A001F140090C8FC481570123E127E1630A25A1600AA007E1530A3123E003F15706C15607F00
642	0F15E06C6CEB01C06C6C14806C6C1303D800FCEB0F00017E131E90381FC078903807FFF0010013
643	80242B7DA92B>I<B612C015F83907F000FC0003143FED0F80ED07C0ED03E0ED01F0150016F816
644	7CA3163EA3163FAA163EA2167E167CA216F8A2ED01F0ED03E0ED07C0ED0F80ED1F00000714FEB6
645	12F815C028297EA82E>I<B7FCA23907F0007F0003140FED07801503A21501A4ED00C01403A216
646	00A35C5C90B5FCA2EBF00F8080A591C8FCAA487EB512F0A222297EA827>70
647	D<9138FF8030010713E090391FC0F87090397E003CF049130ED801F01307484813034848130148
648	5A001F140090C8FC481570123E127E1630A25A1600A84AB5FCA2007E90380007F01503A2123E12
649	3F7E7F6C7E12076C7E6C6C1307D800FC130F017F131C90391FC07870903907FFF0300100EB8000
650	282B7DA92F>I<B512C0A23807F8006C5AB3B1487EB512C0A212297EA816>73
651	D<48B512C0A2390003F8001301B3A9123C127E12FFA313035C387E07E0EA780F383E1FC06CB4C7
652	FCEA03FC1A2A7FA81F>I<B538C03FFFA23A07F8000FF06C48EB07C05E4BC7FC151E5D5D5D5D4A
653	5A4A5A4AC8FC140E5C143C147E14FF13F19038F3BF809038F71FC013FE496C7E13F8496C7E6E7E
654	A26E7E140081157FA26F7E6F7EA26F7E82486C497EB539C07FFF80A229297EA82E>I<D8FFF091
655	3807FFC06D5C0007EEF80000035E017C141BA36D1433A36D1463A26D6C13C3A3903907C00183A3
656	903903E00303A2903801F006A3903800F80CA3EC7C18A3EC3E30A2EC1F60A3EC0FC0A339078007
657	80D80FC04A7ED8FFFC91B512C06E5A32297EA837>77 D<D8FFF8EB3FFFA2D803FCEB03F06DEB01
658	E0ED00C0137F6D7EA26D7E6D7EA26D7EA26D7E6D7EA26D7E147FA2EC3F80EC1FC0A2EC0FE0EC07
659	F0A2EC03F8EC01FCA2EC00FE157FA2153FA2151F150FA21507486C1303487ED8FFFC1301150028
660	297EA82D>I<B512FEECFFC03907F003F00003EB007C818182150F82A55E151F93C7FC153E5DEC
661	03F090B512C0819038F007F0EC01FC6E7E157E157F81A9EE0180A2ED1F81486C1483B539C00FC7
662	006FB4FCC912FC292A7EA82C>82 D<EBFF03000713C3380F83E7381E007F487F487F80127000F0
663	7FA3807E7E91C7FCB4FCEA7FC013FC383FFFC06C13F06C13FC6C7F00017FEA003F01031380EB00
664	3FEC1FC0140F140712C01403A37EA26CEB0780A26CEB0F007EB4131E38E7E07C38C1FFF038C03F
665	C01A2B7DA921>I<007FB612F8A2397E00FC010078EC00780070153800601518A200E0151CA248
666	150CA5C71400B3A6497E48B512FEA226297EA82B>I<B5398007FFC0A2D807F8C7EAFE006C4814
667	7816707F00011560A26C6C5CA27F017E495AA2017F13036D91C7FCA290381F8006A36D6C5AA2EC
668	E01C01071318A2ECF03801031330A26D6C5AA214FC01005BA214FF6E5AA26EC8FCA3141EA3140C
669	2A2A7FA82D>86 D<EAFF80A3EAE000B3B3B2EAFF80A3093C7AAC11>91 D<EAFF80A31203B3B3B2
670	12FFA3093C7FAC11>93 D<EA07FE381FFF80383F07E0EB01F0130080001E1378C7FCA3EB1FF8EA
671	01FF3807FC78EA1FC0EA3F00127E127C00FC14605AA214F8EAFC01EA7E03393F0FFCC0391FFE3F
672	803907F81F001B1A7E991E>97 D<EA078012FFA2120F1207ACEB83F8EB9FFE9038BC1F809038F0
673	07C09038E003E013C090388001F0A2140015F8A815F01401A29038C003E09038E007C09038700F
674	8090383C3F00EB1FFE380607F81D2A7FA921>I<EB7FE03803FFF83807E0FCEA0F80EA1F00123E
675	4813781400A25AA8127CA2007E130C003E131C6C1318380FC0383807F0F03803FFE038007F8016
676	1A7E991B>I<140F49B4FCA2EB001F80AC13FF000313CF3807E1FF380F807F48487E003E7F487F
677	A2127812F8A81278127CA26C5B001E5B001F5B390FC1EF803903FFCFF83800FE0F1D2A7EA921>
678	I<13FF000313C03807C3E0381F01F0381E00F8003E13785A143C127812F8B512FCA200F8C7FCA5
679	127CA2140C6C131C6C1318380F80383807E0F03803FFE038007F00161A7E991B>I<EB1FC0EB7F
680	E0EBF9F0EA01E3120313C3EA0783EB80C01400A8EAFFFEA2EA0780B3A37FEAFFFEA2142A7FA912
681	>I<EC0F803901FC3FC03807FF7B380F8FE3381E03C3003EEBE180393C01E000007C7FA6003C5B
682	EA3E03001E5B381F8F8048B4C7FCEA39FC0030C8FC1238A2123C383FFFE06C13F814FE80387C00
683	7F0078EB0F80481307481303A46C13070078EB0F00003E133E381F80FC3807FFF0C613801A287E
684	9A1E>I<EA078012FFA2120F1207ACEB87F8EB9FFEEBBC3FEBF00F01E01380EBC007A31380B039
685	FFFCFFFCA21E2A7FA921>I<120FEA1F8013C0A31380EA0F00C7FCA8EA0780127FA2120F1207B3
686	A2EAFFF8A20D297FA811>I<EA078012FFA2120F1207ACECFFF0A2EC7F80EC3E0014781470EB81
687	E0EB83C0EB8780018FC7FC139FEBBF80EBFFC013E7EBC3E0EB83F01381EB80F880147C80143F80
688	EC3FC039FFFC7FF8A21D2A7FA920>107 D<EA078012FFA2120F1207B3B2EAFFFCA20E2A7FA911>
689	I<380787F838FF9FFEEBBC3F380FF00FD807E01380EBC007A31380B039FFFCFFFCA21E1A7F9921
690	>110 D<137F3801FFC03807C1F0380F0078001E7F487FA2487FA200F81480A800781400007C5B
691	003C131EA26C5B6C5B3807C1F03801FFC06C6CC7FC191A7E991E>I<380783F838FF9FFE9038BC
692	3F80390FF00FC03907E007E0EBC003018013F01401A2EC00F8A7140115F0A2140301C013E09038
693	E007C09038F00F809038BC3F00EB9FFEEB87F80180C7FCAAEAFFFCA21D267F9921>I<38078FC0
694	38FF9FE0EBB9F0EA0FF1EA07E1A2EBC000A25BAF7FEAFFFEA2141A7F9917>114
695	D<3807F8C0EA1FFFEA3C0FEA7003EAF001EAE000A27E6C130012FEEA7FF0EA3FFE6C7E00071380
696	38007FC0EB07E0EAC0031301EAE000A27EEB01C0EAF80338FE078038EFFF00EAC3FC131A7E9918
697	>I<487EA41203A31207A2120F123FB51280A238078000AD14C0A613C10003138013E33801FF00
698	EA007E12257FA417>I<390780078000FF13FFA2000F130F00071307AF140FA2141F3803C03F90
699	38E0F7C03901FFE7FC38007F871E1A7F9921>I<39FFF01FF8A2390F800FC00007EB0780150013
700	C000031306A26C6C5AA2EBF01C00001318A2EB7830A36D5AA26D5AA36D5AA36DC7FCA21D1A7F99
701	20>I<39FFF07FF0A2390FC01F800007EB1E000003131C6C6C5A3800F0306D5AEB78E0EB3DC0EB
702	1F8091C7FC7F8080EB1BE01339EB70F0EB6078EBC07C0001133C48487E0007131F001F148039FF
703	E07FF8A21D1A7F9920>120 D<39FFF01FF8A2390F800FC00007EB0780150013C000031306A26C
704	6C5AA2EBF01C00001318A2EB7830A36D5AA26D5AA36D5AA36DC7FCA21306A2130E130C1230EAFC
705	18A25B1370EA78E0EA3FC06CC8FC1D267F9920>I E /Fl 19 117 df<150C151EA3153FA34B7E
706	A34B7EA24A7F159FA202037F150FA202067F1507A24A6C7EA34A6C7EA202387FEC3000A2027080
707	0260137FA24A80163FA249486D7EA349B67EA249810106C71207A249811603A249811601A2496E
708	7EA3496F7E13F084EA03F8D80FFE913801FFF0B500C0013FEBFFC0A33A3C7DBB41>65
709	D<B712F816FF17E0C69039C0001FF06D48EB07FC707E707E82EF7F8018C0173F18E0A718C0A2EF
710	7F8017FF18004C5A4C5AEE0FF8EE3FE091B61280A2913980001FE0EE03F8EE01FE707EEF7F80EF
711	3FC018E0171F18F0170F18F8A8EF1FF0A218E0173FEF7FC0EFFF804C13004C5A496CEB1FFCB812
712	F017C04CC7FC353B7EBA3D>I<DBFFC01360020F01F813E0023F13FE9139FFC03F81903A03FE00
713	07C3D90FF8EB01E7D91FE0EB00F74948143F4948141F49C8FC4848150F48481507491503120748
714	481501A2485A1700123F5B1860127FA348481600AD6C7E1860A2123FA27F001F17E018C06C7E17
715	016C6C1680000316037F6C6CED07006C6C150E6D6C141E6D6C5C6D6C5CD90FF8495AD903FEEB07
716	E0903A00FFC03F80023FB5C7FC020F13FC020013C0333D7BBB3E>I<B77E16F816FEC69039C001
717	FF80903A7F80003FE0EE0FF0707E707E707EA2838284A795C7FC5E5F5F4C5A4C5A4C5AEE3F80DB
718	01FEC8FC91B512F85E91388003FCED00FEEE7F80707E707E160F83A2707EA683A6193083160319
719	7004011460496C6E13E0B6D8C000EB80C0EF3FC394381FFF80CA3801FE003C3C7EBA3F>82
720	D<B5D8FE01B500FC90383FFFE0A300079026800007018001071300000190C76C48C7EA01FC4972
721	5A6C6C020116701B60A26E6D6C15E0017F61A26E6F1301013F61A26E902601BFC01303011F96C7
722	FCA26E9026031FE05B010F1806A26E01077F0107DA060F5CA26E010E7F0103DA0C075CA2041C7F
723	6D6CD918035CA204387F6D6CD930015CA2846E6C486C5CA219806E6C4890387F8180A219C19126
724	1FE180D93FC3C8FCA3DA0FF3C7EA1FE6A3DA07FEEC0FFCA34B140702035EA24B140302015EA24B
725	140102005EA24B140003605D533C7EBA58>87 D<EBFFE0000713FC381F807FEC1F80486C6C7E6E
726	7E6E7EA26C486C7EA2C7FCA4143FEB07FFEB7FF93801FF01EA07FCEA0FF0EA1FC0123F1380EA7F
727	00A200FE150CA31403A26C13076C13069039800EFC1C3A3FC03C7E383A1FE0F87FF03A07FFE03F
728	E0C69038800F8026257CA42B>97 D<EA01F812FFA312071201B2EC0FF0EC7FFE9138F81F809039
729	FBC007E09039FF8003F049486C7E6F7E49147E5B82A21780A2161F17C0A91780163FA217005E16
730	7E6D5C7F01F6495A01F7495A9039E3C00FC09039C1F03F809026C07FFEC7FC9038801FF02A3C7E
731	BB30>I<903807FFC0011F13F090387E007CD801F813FC3903F001FEEA07E0EA0FC0121F903880
732	00FC123F90C8FC5AA2127E12FEA9127E127FA26C14037F001F14076D1306000F140E6C6C131C6C
733	6C13386C6C13F039007E03E090381FFF80903807FE0020257DA426>I<ED07E0EC03FFA3EC001F
734	1507B2EB03FE90381FFF8790387F03E79038FC00F7D803F0133F4848131F4848130FA248481307
735	123F90C7FC5AA2127E12FEA9127E127FA27EA26C6C130FA26C6C131F6C6C133F6C6C13776C6CEB
736	E7F83B007E07C7FFC090381FFF87903803FC072A3C7DBB30>I<EB07FE90383FFF8090387E0FE0
737	3901F801F048486C7E4848137C4848137E4848133E153F48C77EA2481580A2127E12FEB7FCA248
738	C9FCA6127E127FA26CEC01807F001F14036C6C14005D6C6C130E6C6C5BD800FC137890387F03F0
739	90381FFFC0D903FEC7FC21257EA426>I<EC7F80903801FFE0903807E1F0EB0FC390381F87F8EB
740	3F07137EA39038FC03F091C7FCADB512FCA3D800FCC7FCB3AC487E387FFFFCA31D3C7FBB1A>I<
741	EA01F812FFA312071201B2EC07F8EC3FFF91387C1F809138E00FC09039F9C007E0EBFB809039FF
742	0003F05B5BA35BB3A4486C497EB500F1B512E0A32B3C7EBB30>104 D<EA03E0487E487EA56C5A
743	6C5AC8FCACEA01F8127FA312071201B3AA487EB512E0A3133A7FB917>I<EA01F812FFA3120712
744	01B3B3AF487EB512F0A3143C7FBB17>108 D<3901F807F800FFEB3FFF91387C1F809138E00FC0
745	3A07F9C007E03801FB809039FF0003F05B5BA35BB3A4486C497EB500F1B512E0A32B257EA430>
746	110 D<EB01FE90380FFFC090383E01F09038F8007C48487FD803C0130F000715804848EB07C048
747	C7EA03E04815F0A2007EEC01F8A300FE15FCA9007E15F8A2007F14036C15F0A26C6CEB07E0000F
748	15C06D130F6C6CEB1F80D801F0EB3E006C6C5B90387F03F890381FFFE0D901FEC7FC26257EA42B
749	>I<3903F01F8000FFEB7FE0ECF3F09038F1C7F83807F3873801F70713F613FE9038FC03F0EC00
750	C01500A25BB3A3487EB512F8A31D257EA422>114 D<9038FFC180000713F3380F807F381E001F
751	0038130F007813070070130312F01401A27E7EB490C7FCEA7FE013FF6C13F06C13FC6C7F6C7FC6
752	1480010F13C0EB007FEC1FE000C013071403A26C1301A27EA26CEB03C07E6CEB07806CEB0F0038
753	F3C07E38E1FFF838C07FE01B257DA422>I<1318A51338A41378A213F8A2120112031207001FB5
754	FCB6FCA2D801F8C7FCB2EC0180A91403D800FC1300A2EB7E07EB3F0EEB1FFCEB03F819357EB421
755	>I E end
756	%%EndProlog
757	%%BeginSetup
758	%%Feature: *Resolution 300
759	TeXDict begin
760	%%EndSetup
761	%%Page: 1 1
762	bop 0 396 a Fl(Role)27 b(Based)f(Access)h(Con)n(trol)f(for)g(the)h(W)-7
763	b(orld)26 b(Wide)i(W)-7 b(eb)462 544 y Fk(John)20 b(F.)g(Barkley)-5
764	b(,)18 b(An)n(thon)n(y)j(V.)e(Cincotta,)208 619 y(Da)n(vid)h(F.)f(F)-5
765	b(erraiolo,)19 b(Serban)h(Ga)n(vrilla,)f(and)h(D.)f(Ric)n(hard)h(Kuhn)350
766	694 y(National)f(Institute)h(of)g(Standards)h(and)f(T)-5 b(ec)n(hnology)574
767	768 y(Gaithersburg,)20 b(Maryland)f(20899)60 843 y(301-975-3290)f([v)n
768	(oice],)g(301-926-3696)g([fax])h(\(Ric)n(k)g(Kuhn,)i(p)r(oin)n(t)f(of)g(con)n
769	(tact\))785 918 y(kuhn@nist.go)n(v)805 1035 y(April)f(8,)h(1997)875
770	1218 y Fj(Abstract)190 1303 y Fi(One)c(of)f(the)h(most)f(c)o(hallenging)i
771	(problems)f(in)g(managing)g(large)f(net)o(w)o(ork)o(ed)g(systems)g(is)h(the)
772	122 1359 y(complexit)o(y)h(of)e(securit)o(y)h(administration.)22
773	b(This)17 b(is)f(particularly)h(true)f(for)f(organizations)h(that)122
774	1416 y(are)k(attempting)h(to)f(manage)h(securit)o(y)g(in)g(distributed)i(m)o
775	(ultimedia)f(en)o(vironmen)o(ts)f(suc)o(h)g(as)122 1472 y(those)13
776	b(using)g(w)o(orld)g(Wide)h(W)l(eb)f($WWW$)f(serv)o(ers.)18
777	b(T)l(o)q(da)o(y)l(,)13 b(securit)o(y)h(administration)f(is)h(costly)122
778	1528 y(and)i(prone)g(to)f(error)h(b)q(ecause)g(administrators)g(usually)h(sp)
779	q(ecify)g(access)f(con)o(trol)g(lists)h(for)e(eac)o(h)122 1585
780	y(user)g(on)g(the)h(system)e(individual)q(ly)m(.)190 1641 y(Role)23
781	b(based)f(access)g(con)o(trol)g($RBA)o(C$)f(is)i(a)e(tec)o(hnology)h(that)f
782	(is)i(attracting)e(increasing)122 1698 y(atten)o(tion,)11 b(particularly)i
783	(for)d(commercial)i(applications,)i(b)q(ecause)e(of)f(its)g(p)q(oten)o(tial)h
784	(for)f(reducing)122 1754 y(the)21 b(complexit)o(y)g(and)g(cost)g(of)f
785	(securit)o(y)h(administration)h(in)f(large)g(net)o(w)o(ork)o(ed)f
786	(applications.)122 1811 y(This)e(pap)q(er)g(describ)q(es)h(soft)o(w)o(are)d
787	(comp)q(onen)o(ts)i(that)f(pro)o(vide)h(RBA)o(C)g(for)f(net)o(w)o(ork)o(ed)f
788	(serv)o(ers)122 1867 y(using)23 b(WWW)e(proto)q(cols.)41 b(The)22
789	b(RBA)o(C)h(comp)q(onen)o(ts)f(can)g(b)q(e)h(link)o(ed)h(with)f(commercially)
790	122 1924 y(a)o(v)m(ailable)17 b(w)o(eb)e(serv)o(ers,)f(and)i(require)g(no)f
791	(mo)q(di\014cation)h(of)f(the)g(serv)o(er)g(soft)o(w)o(are.)0
792	2090 y Fh(1)110 b(In)n(tro)r(duction)0 2200 y Fg(Establishing)12
793	b(and)g(main)o(taining)e(a)h(presence)g(on)h(the)f(W)l(orld)g(Wide)g(W)l(eb)h
794	($WWW$,)f(once)g(a)h(sideline)e(for)0 2260 y(US)i(industry)l(,)g(has)h(b)q
795	(ecome)d(a)i(k)o(ey)f(strategic)h(asp)q(ect)h(of)f(mark)o(eting)e(and)j
796	(sales.)19 b(Man)o(y)12 b(companies)f(ha)o(v)o(e)0 2320 y(demonstrated)16
797	b(that)g(a)h(w)o(ell)e(designed)h(W)l(eb)h(site)f(can)g(ha)o(v)o(e)g(a)h(p)q
798	(ositiv)o(e)e(e\013ect)h(on)h(their)f(pro\014tabilit)o(y)l(.)0
799	2380 y(Enabling)f(customers)e(to)i(answ)o(er)g(their)f(o)o(wn)h(questions)f
800	(b)o(y)g(clic)o(king)f(their)h(w)o(a)o(y)g(through)h(W)l(eb)g(pages,)0
801	2440 y(instead)i(of)h(dealing)f(with)h(op)q(erators)g(and)g(v)o(oice)f(resp)q
802	(onse)h(systems,)e(increases)h(the)g(e\016cency)f(of)h(the)0
803	2500 y(customer)e(in)o(terface.)150 2561 y(More)k(recen)o(tly)e(companies)h
804	(ha)o(v)o(e)g(b)q(egun)i(using)f(w)o(eb)g(tec)o(hnology)g(on)g(priv)m(ate)g
805	(net)o(w)o(orks)g(for)0 2621 y(service)c(to)j(in)o(ternal)e(clien)o(ts.)21
806	b(W)l(eb)c(sites)g(are)g(no)o(w)g(running)g(inside)f(the)h(compan)o(y)l(,)e
807	(most)h(created)h(for)0 2681 y(and)k(b)o(y)e(emplo)o(y)o(ees.)29
808	b(Corp)q(orations)22 b(are)e(seizing)f(the)h(W)l(eb)g(as)g(a)g(swift)g(w)o(a)
809	o(y)g(to)g(streamline)e({)i(ev)o(en)963 2828 y(1)p eop
810	%%Page: 2 2
811	bop 0 195 a Fg(transform)19 b({)h(their)f(organizations.)31
812	b(These)20 b(priv)m(ate)f(nets,)h(or)g(\\in)o(tranets,")g(use)f(the)g
813	(infrastructure)0 255 y(and)c(standards)g(of)f(the)g(In)o(ternet)f(and)h(the)
814	g(W)l(orld)g(Wide)f(W)l(eb)h(but)g(are)g(cordoned)h(o\013)f(from)f(the)h
815	(public)0 315 y(In)o(ternet)h(through)i(\014rew)o(alls.)150
816	376 y(The)j(W)l(eb)f(can)h(b)q(e)g(used)g(as)h(an)f(inexp)q(ensiv)o(e)e(y)o
817	(et)h(p)q(o)o(w)o(erful)g(alternativ)o(e)g(to)h(other)g(forms)f(of)0
818	436 y(in)o(ternal)c(comm)o(unications.)20 b(Due)c(to)h(the)f(fact)h(that)g(W)
819	l(eb)f(bro)o(wsers)h(run)g(on)g(an)o(y)f(t)o(yp)q(e)g(of)h(computer,)0
820	496 y(electronic)i(information)g(can)i(b)q(e)f(accessed)g(consisten)o(tly)g
821	(and)h(concurren)o(tly)e(b)o(y)h(all)g(emplo)o(y)o(ee)o(s.)31
822	b(A)0 556 y(plethora)21 b(of)f(corp)q(orate)i(information)d(\(e.g.,)i(pro)q
823	(cedures,)g(training)f(materials,)g(directories,)g(forms\))0
824	616 y(can)e(b)q(e)g(con)o(v)o(erted)e(to)i(electronic)e(form)g(and)j(made)d
825	(a)o(v)m(ailable)h(via)h(the)f(W)l(eb.)25 b(With)18 b(a)g(single)f(source)0
826	677 y(for)d(these)g(materials)f(the)h(cost)g(of)h(main)o(tenance)d(is)i
827	(signi\014can)o(tly)f(reduced,)h(while)f(greatly)h(simplifying)0
828	737 y(the)22 b(task)h(of)g(ensuring)g(currency)l(.)39 b(Th)o(us)23
829	b(an)g(ob)s(jectiv)o(e)e(of)i(en)o(terprise)e(computing,)h(creation)h(of)g(a)
830	0 797 y(compan)o(y)17 b(wide)g(system)f(irresp)q(ectiv)o(e)g(of)i(the)g
831	(underlying)f(information)f(tec)o(hnology)i(infrastructure,)0
832	857 y(can)e(b)q(e)h(ful\014lled.)150 917 y(Although)h(in)o(tranets)f(can)h
833	(o\013er)h(great)f(b)q(ene\014ts)g(to)g(a)g(compan)o(y)f(or)h(go)o(v)o
834	(ernmen)o(t)d(agency)l(,)j(se-)0 978 y(curit)o(y)j(threats)h(remain.)36
835	b(T)l(o)22 b(date)g(net)g(en)o(th)o(usiasts)g(tend)f(to)i(fo)q(cus)f(on)g(ho)
836	o(w)h(to)f(link)f(p)q(eople)g(and)0 1038 y(businesses,)e(not)g(on)h(using)f
837	(the)f(net)o(w)o(ork)g(as)i(a)f(w)o(a)o(y)f(to)h(run)g(and)h(manage)e
838	(businesses)h(securely)l(.)27 b(As)0 1098 y(w)o(as)18 b(the)f(case)g(b)q
839	(efore)h(in)o(tranets,)f(not)h(all)f(users)g(are)h(allo)o(w)o(ed)e(access)i
840	(to)f(all)g(information.)24 b(Although)0 1158 y(existing)12
841	b(W)l(eb)h(serv)o(ers)g(can)g(e\013ectiv)o(ely)d(pro)o(vide)j(all)f(or)i
842	(nothing)f(access)g(to)h(a)f(particular)g(W)l(eb)g(site)f(and)0
843	1218 y(a)20 b(n)o(um)o(b)q(er)d(of)j(p)q(opular)g(W)l(eb)f(serv)o(ers)f(can)i
844	(ev)o(en)e(pro)o(vide)g(fairly)h(\014ne)g(grained)g(access)g(con)o(trol,)h
845	(they)0 1279 y(pro)o(vide)g(v)o(ery)g(primitiv)o(e)e(to)q(ols)k(to)f
846	(administer)f(these)h(con)o(trols)g(from)f(the)h(p)q(ersp)q(ectiv)o(e)e(of)j
847	(a)g(single)0 1339 y(en)o(terprise.)150 1399 y(This)i(pap)q(er)h(describ)q
848	(es)e(the)h(b)q(ene\014ts)g(of)g(RBA)o(C)f(and)h(an)h(implem)o(en)n(tation)d
849	(of)i(RBA)o(C)f(on)0 1459 y(the)17 b(W)l(eb)g($RBA)o(C/W)l(eb$,)f(and)i(in)
850	f(particular)g(as)h(RBA)o(C)e(applies)h(to)g(an)h(in)o(tranet)f(computing)f
851	(en)o(vi-)0 1519 y(ronmen)o(t.)31 b(This)21 b(will)e(pro)o(vide)g(in)o
852	(tranet)h(administrators)f(with)h(a)h(capabilit)o(y)e(for)h(the)g(\014rst)h
853	(time)d(to)0 1579 y(cen)o(trally)e(administer)f(and)k(regulate)e(user)g
854	(access)h(to)f(information)g(in)g(a)h(manner)e(that)i(is)f(consisten)o(t)0
855	1640 y(with)f(the)g(curren)o(t)f(set)i(of)f(la)o(ws,)g(regulations,)g(and)h
856	(practices)e(that)i(face)f(their)g(business)g(to)q(da)o(y)l(.)0
857	1806 y Fh(2)110 b(RBA)n(C)27 b(Description)0 1916 y Fg(Role)16
858	b(based)h(access)g(con)o(trol)f($RBA)o(C$)g([1],)g([2)o(],)g([3],)g([4],)g
859	([5])g(is)h(an)g(alternativ)o(e)e(to)i(traditional)g(discre-)0
860	1976 y(tionary)i($D)o(A)o(C$)g(and)h(mandatory)f(access)g(con)o(trol)g
861	($MA)o(C$)f(p)q(olicies)h(that)h(is)f(attracting)g(increasing)0
862	2036 y(atten)o(tion)k([6],)i(particularly)d(for)i(commerc)o(ial)c
863	(applications.)43 b(The)24 b(principle)e(motiv)m(ation)g(b)q(ehind)0
864	2096 y(RBA)o(C)16 b(is)g(the)g(desire)g(to)h(sp)q(ecify)f(and)h(enforce)f(en)
865	o(terprise-sp)q(eci\014c)f(securit)o(y)g(p)q(olicies)h(in)g(a)h(w)o(a)o(y)g
866	(that)0 2156 y(maps)c(naturally)h(to)g(an)g(organization's)g(structure.)21
867	b(T)l(raditionally)l(,)13 b(managing)g(securit)o(y)g(has)h(required)0
868	2217 y(mapping)j(an)i(organization's)f(securit)o(y)f(p)q(olicy)g(to)h(a)h
869	(relativ)o(ely)c(lo)o(w-lev)o(el)h(set)i(of)g(con)o(trols,)g(t)o(ypically)0
870	2277 y(access)e(con)o(trol)g(lists.)150 2337 y(With)j(RBA)o(C,)e(securit)o(y)
871	g(is)i(managed)f(at)h(a)h(lev)o(el)c(that)k(corresp)q(onds)g(closely)d(to)i
872	(the)g(organi-)0 2397 y(zation's)g(structure.)29 b(Eac)o(h)19
873	b(user)g(is)g(assigned)g(one)g(or)h(more)d Ff(r)q(ol)q(es)p
874	Fg(,)i(and)h(eac)o(h)e Ff(r)q(ol)q(e)h Fg(is)g(assigned)h(one)0
875	2457 y(or)h(more)f Ff(pr)q(iv)r(il)q(eg)r(es)f Fg(that)i(are)g(p)q(ermitted)e
876	(to)i(users)h(in)e(that)h(role)g($see)f(Figure)h(1$.)35 b(Roles)21
877	b(can)g(b)q(e)0 2518 y(hierarc)o(hical.)g(F)l(or)c(example,)d(some)i(roles)g
878	(in)h(a)g(hospital)g(ma)o(y)e(b)q(e)i(health)f(care)h(pro)o(vider,)e(n)o
879	(urse,)h(and)0 2578 y(do)q(ctor.)23 b(The)16 b(do)q(ctor)h(role)f(ma)o(y)f
880	(include)g(all)h(privileges)f(a)o(v)m(ailable)h(to)g(the)g(n)o(urse)h(role,)e
881	(whic)o(h)h(in)g(turn)0 2638 y(includes)j(all)h(the)h(privileges)e(a)o(v)m
882	(ailable)g(to)i(the)f(health)h(care)f(pro)o(vider)f(role.)34
883	b(Securit)o(y)19 b(administra-)0 2698 y(tion)g(with)f(RBA)o(C)g(consists)h
884	(of)g(determining)e(the)h(op)q(erations)i(that)f(m)o(ust)e(b)q(e)i(executed)f
885	(b)o(y)g(p)q(ersons)963 2828 y(2)p eop
886	%%Page: 3 3
887	bop 296 154 a
888	21444853 4867850 0 0 21444853 4867850 startTexFig
889	296 154 a
890	%%BeginDocument: fig1.eps
891	/$F2psDict 200 dict def
892	$F2psDict begin
893	$F2psDict /mtrx matrix put
894	/col-1 {} def
895	/col0 {0.000 0.000 0.000 srgb} bind def
896	/col1 {0.000 0.000 1.000 srgb} bind def
897	/col2 {0.000 1.000 0.000 srgb} bind def
898	/col3 {0.000 1.000 1.000 srgb} bind def
899	/col4 {1.000 0.000 0.000 srgb} bind def
900	/col5 {1.000 0.000 1.000 srgb} bind def
901	/col6 {1.000 1.000 0.000 srgb} bind def
902	/col7 {1.000 1.000 1.000 srgb} bind def
903	/col8 {0.000 0.000 0.560 srgb} bind def
904	/col9 {0.000 0.000 0.690 srgb} bind def
905	/col10 {0.000 0.000 0.820 srgb} bind def
906	/col11 {0.530 0.810 1.000 srgb} bind def
907	/col12 {0.000 0.560 0.000 srgb} bind def
908	/col13 {0.000 0.690 0.000 srgb} bind def
909	/col14 {0.000 0.820 0.000 srgb} bind def
910	/col15 {0.000 0.560 0.560 srgb} bind def
911	/col16 {0.000 0.690 0.690 srgb} bind def
912	/col17 {0.000 0.820 0.820 srgb} bind def
913	/col18 {0.560 0.000 0.000 srgb} bind def
914	/col19 {0.690 0.000 0.000 srgb} bind def
915	/col20 {0.820 0.000 0.000 srgb} bind def
916	/col21 {0.560 0.000 0.560 srgb} bind def
917	/col22 {0.690 0.000 0.690 srgb} bind def
918	/col23 {0.820 0.000 0.820 srgb} bind def
919	/col24 {0.500 0.190 0.000 srgb} bind def
920	/col25 {0.630 0.250 0.000 srgb} bind def
921	/col26 {0.750 0.380 0.000 srgb} bind def
922	/col27 {1.000 0.500 0.500 srgb} bind def
923	/col28 {1.000 0.630 0.630 srgb} bind def
924	/col29 {1.000 0.750 0.750 srgb} bind def
925	/col30 {1.000 0.880 0.880 srgb} bind def
926	/col31 {1.000 0.840 0.000 srgb} bind def
927
928	end
929	save
930	-35.0 109.0 translate
931	1 -1 scale
932
933	/clp {closepath} bind def
934	/ef {eofill} bind def
935	/gr {grestore} bind def
936	/gs {gsave} bind def
937	/l {lineto} bind def
938	/m {moveto} bind def
939	/n {newpath} bind def
940	/s {stroke} bind def
941	/slc {setlinecap} bind def
942	/slj {setlinejoin} bind def
943	/slw {setlinewidth} bind def
944	/srgb {setrgbcolor} bind def
945	/rot {rotate} bind def
946	/sc {scale} bind def
947	/tr {translate} bind def
948	/tnt {dup dup currentrgbcolor
949	4 -2 roll dup 1 exch sub 3 -1 roll mul add
950	4 -2 roll dup 1 exch sub 3 -1 roll mul add
951	4 -2 roll dup 1 exch sub 3 -1 roll mul add srgb}
952	bind def
953	/shd {dup dup currentrgbcolor 4 -2 roll mul 4 -2 roll mul
954	4 -2 roll mul srgb} bind def
955	/DrawEllipse {
956	/endangle exch def
957	/startangle exch def
958	/yrad exch def
959	/xrad exch def
960	/y exch def
961	/x exch def
962	/savematrix mtrx currentmatrix def
963	x y tr xrad yrad sc 0 0 1 startangle endangle arc
964	closepath
965	savematrix setmatrix
966	} def
967
968	/$F2psBegin {$F2psDict begin /$F2psEnteredState save def} def
969	/$F2psEnd {$F2psEnteredState restore end} def
970
971	$F2psBegin
972	10 setmiterlimit
973	0.06000 0.06000 sc
974	7.500 slw
975	n 1200 1200 600 600 0 360 DrawEllipse gs col-1 s gr
976
977	n 3300 1200 605 605 0 360 DrawEllipse gs col-1 s gr
978
979	n 5400 1200 605 605 0 360 DrawEllipse gs col-1 s gr
980
981	n 1800 1200 m 2700 1200 l gs col-1 s gr
982	n 1920.00 1230.00 m 1800.00 1200.00 l 1920.00 1170.00 l gs col-1 s gr
983	n 2580.00 1170.00 m 2700.00 1200.00 l 2580.00 1230.00 l gs col-1 s gr
984	n 3900 1200 m 4800 1200 l gs col-1 s gr
985	n 4020.00 1230.00 m 3900.00 1200.00 l 4020.00 1170.00 l gs col-1 s gr
986	n 4680.00 1170.00 m 4800.00 1200.00 l 4680.00 1230.00 l gs col-1 s gr
987	n 1950 1200 m 2550 1200 l gs col-1 s gr
988	n 2070.00 1230.00 m 1950.00 1200.00 l 2070.00 1170.00 l gs col-1 s gr
989	n 2430.00 1170.00 m 2550.00 1200.00 l 2430.00 1230.00 l gs col-1 s gr
990	n 4050 1200 m 4650 1200 l gs col-1 s gr
991	n 4170.00 1230.00 m 4050.00 1200.00 l 4170.00 1170.00 l gs col-1 s gr
992	n 4530.00 1170.00 m 4650.00 1200.00 l 4530.00 1230.00 l gs col-1 s gr
993	/Times-Bold findfont 210.00 scalefont setfont
994	3000 1275 m
995	gs 1 -1 sc (roles) col-1 show gr
996	/Times-Bold findfont 210.00 scalefont setfont
997	825 1275 m
998	gs 1 -1 sc (subjects) col-1 show gr
999	/Times-Bold findfont 210.00 scalefont setfont
1000	4875 1275 m
1001	gs 1 -1 sc (privileges) col-1 show gr
1002	$F2psEnd
1003	restore
1004	%%EndDocument
1005	296 154 a
1006	endTexFig
1007	690 564 a Fg(Figure)16 b(1:)22 b(RBA)o(C)15 b(Relations)0 698
1008	y(in)21 b(particular)g(jobs,)i(and)f(assigning)g(emplo)o(y)o(ees)d(to)i(the)g
1009	(prop)q(er)h(roles.)37 b(Complexities)18 b(in)o(tro)q(duced)0
1010	758 y(b)o(y)g(m)o(utually)d(exclusiv)o(e)h(roles)i(or)h(role)e(hierarc)o
1011	(hies)g(are)h(handled)g(b)o(y)g(the)g(RBA)o(C)f(soft)o(w)o(are,)h(making)0
1012	818 y(securit)o(y)d(administration)g(easier.)21 b(A)16 b(formal)f
1013	(description)g(of)i(RBA)o(C)e(is)h(pro)o(vided)f(in)h(the)g(App)q(endix.)0
1014	963 y Fe(2.1)70 b(RBA)n(C)22 b(Example)0 1055 y Fg(Consider)e(the)f(branc)o
1015	(h)g(o\016ce)g(of)h(a)g(bank.)31 b(In)19 b(this)h(en)o(vironmen)o(t,)d(there)
1016	i(are)g(roles)h(suc)o(h)f(as)h(branc)o(h)0 1115 y(manager,)15
1017	b(teller,)g(and)h(accoun)o(t)h(represen)o(tativ)o(e,)c(as)k(illustrated)f(in)
1018	f(Figure)h(2.)150 1175 y(The)11 b(graph)i(structure)e(sho)o(ws)h(role)f
1019	(hierarc)o(h)o(y)l(.)19 b(The)11 b(role)g Ff(f)5 b(inancial)p
1020	1433 1175 15 2 v 17 w(adv)r(isor)13 b Fg(inherits)d(the)h(role)0
1021	1236 y Ff(account)p 169 1236 V 17 w(r)q(ep)p Fg(.)20 b(An)11
1022	b(individual)f(authorized)i(for)f(the)g(role)g Ff(f)5 b(inancial)p
1023	1274 1236 V 18 w(adv)r(isor)12 b Fg(is)f(p)q(ermitted)e(to)j(p)q(erform)0
1024	1296 y(all)17 b(of)h(the)f(op)q(erations)i(p)q(ermitted)c(to)j(an)g
1025	(individual)e(authorized)i(for)f(the)h(role)f Ff(account)p
1026	1706 1296 V 17 w(r)q(ep)p Fg(.)25 b(Th)o(us,)0 1356 y(an)13
1027	b(individual)e(in)i(the)f(role)g(of)h Ff(f)5 b(inancial)p 779
1028	1356 V 17 w(adv)r(isor)14 b Fg(is)e(able)g(to)h(create)f(and)i(remo)o(v)o(e)c
1029	(accoun)o(ts.)20 b(Because)0 1416 y(accoun)o(t)15 b(represen)o(tativ)o(es,)f
1030	(branc)o(h)h(managers,)g(in)o(ternal)g(auditors,)h(and)g(tellers)e(are)h(all)
1031	g(emplo)o(y)o(ees)e(of)0 1476 y(the)j(bank,)g(their)g(corresp)q(onding)h
1032	(roles)f(inherit)f(the)h(emplo)o(y)o(ee)d(role.)150 1537 y(In)18
1033	b(Figure)g(2,)h(the)f(role)g Ff(account)p 778 1537 V 17 w(r)q(ep)h
1034	Fg(is)f(highlighed)g(in)g(order)g(to)h(sho)o(w)g(the)f(other)g(role)g(rela-)0
1035	1597 y(tionships)h(for)h Ff(account)p 456 1597 V 17 w(r)q(ep)p
1036	Fg(.)31 b(The)19 b(roles)g Ff(tel)q(l)q(er)g Fg(and)h Ff(account)p
1037	1209 1597 V 17 w(hol)q(der)h Fg(are)e(sho)o(wn)h(in)f(rectangles)g(to)0
1038	1657 y(indicate)g(that)h(these)g(roles)f(ha)o(v)o(e)g(a)h(\\Dynamic)f
1039	(Separation)h(of)g(Duties")g($DSD$)h(relationship)e(with)0
1040	1717 y(the)f(role)g Ff(account)p 352 1717 V 17 w(r)q(ep)p Fg(.)28
1041	b(This)19 b(relationship)f(is)g(a)h(con\015ict)f(in)g(in)o(terest)f
1042	(relationship)h(indicating)g(that)0 1777 y(an)h(individual)f(acting)h(in)g
1043	(the)f(role)h(of)g Ff(account)p 922 1777 V 17 w(r)q(ep)h Fg(cannot)f(also)h
1044	(b)q(e)f(acting)g(in)f(either)g(of)h(the)g(roles)0 1837 y(of)h
1045	Ff(account)p 228 1837 V 17 w(hol)q(der)i Fg(or)e Ff(tel)q(l)q(er)q
1046	Fg(.)31 b(The)19 b(p)q(olicy)h(of)g(the)g(bank)g(is)g(that)g(an)g(accoun)o(t)
1047	g(represen)o(tativ)o(e,)f(an)0 1898 y(emplo)o(y)o(ee)f(of)k(the)f(bank,)h
1048	(can)g(ha)o(v)o(e)e(an)i(accoun)o(t)g(in)e(the)i(bank)f(but)h(suc)o(h)f(an)h
1049	(individual)e(ma)o(y)g(not)0 1958 y(sim)o(ultaneously)12 b(pro)q(cess)j
1050	(their)f(p)q(ersonal)h(accoun)o(t)f(while)g(pro)q(cessing)h(accoun)o(ts)f(of)
1051	h(others.)21 b(Lik)o(ewise,)0 2018 y(b)q(ecause)13 b(a)g(teller)e(has)j(an)f
1052	(op)q(en)h(cash)f(dra)o(w)o(er)f(that)h(m)o(ust)f(balance)h(when)f(closed,)h
1053	(an)g(individual)f(acting)0 2078 y(in)i(the)h(role)f(of)h Ff(account)p
1054	454 2078 V 17 w(r)q(ep)g Fg(and)h(sitting)e(at)h(a)g(desk)g(a)o(w)o(a)o(y)f
1055	(from)g(a)h(teller's)d(windo)o(w)j(is)g(not)g(p)q(ermitted)0
1056	2138 y(to)i(sim)o(ultaneously)d(act)i(in)g(the)g(role)g(of)g
1057	Ff(tel)q(l)q(er)g Fg(ev)o(en)f(if)h(authorized)g(for)g(that)h(role.)150
1058	2199 y(The)g(role)f(in)o(ternal)p 514 2199 V 17 w(auditor)h(is)f(sho)o(wn)i
1059	(in)e(an)h(o)q(ctagonal)i(b)q(o)o(x)d(to)i(indicate)d(that)i(this)g(role)f
1060	(has)0 2259 y(a)23 b(\\Static)f(Separation)h(of)f(Duties")h($SSD$)g
1061	(relationship)e(with)i(the)f(role)f Ff(account)p 1614 2259
1062	V 18 w(r)q(ep)p Fg(.)39 b(The)23 b(SSD)0 2319 y(relationship)f(is)h(also)g(a)
1063	g(con\014ct)f(of)h(in)o(terest)f(relationship)g(lik)o(e)f(the)h(DSD)h
1064	(relationship)f(but)h(m)o(uc)o(h)0 2379 y(stronger.)32 b(If)20
1065	b(t)o(w)o(o)f(roles)h(ha)o(v)o(e)f(a)h(DSD)g(relationship,)g(then)g(they)f
1066	(ma)o(y)f(b)q(oth)j(b)q(e)f(authorized)f(for)i(an)0 2439 y(individual)c(but)i
1067	(that)h(individual)d(ma)o(y)g(not)i(act)g(in)g(b)q(oth)g(roles)g(sim)o
1068	(ultaneously)l(.)26 b(If)19 b(t)o(w)o(o)f(roles)h(ha)o(v)o(e)0
1069	2500 y(a)f(SSD)g(relationship,)f(then)g(they)g(ma)o(y)f(not)i(ev)o(en)f(b)q
1070	(e)g(authorized)h(for)f(the)h(same)e(individual.)24 b(In)17
1071	b(this)0 2560 y(example,)f(the)j(p)q(olicy)e(of)i(the)f(bank)h(is)f(that)h
1072	(there)f(is)g(a)h(fundamen)o(tal)e(con\015ict)h(of)h(in)o(terest)e(b)q(et)o
1073	(w)o(een)0 2620 y(the)c(roles)g(of)h(in)o(ternal)p 413 2620
1074	V 17 w(auditor)f(and)h Ff(account)p 855 2620 V 17 w(r)q(ep)p
1075	Fg(.)21 b(Th)o(us,)14 b(these)f(t)o(w)o(o)g(roles)h(ma)o(y)d(nev)o(er)i(b)q
1076	(e)g(authorized)0 2680 y(for)k(the)f(same)f(individual.)963
1077	2828 y(3)p eop
1078	%%Page: 4 4
1079	bop 0 715 a
1080	29272883 20787036 0 0 29272883 20787036 startTexFig
1081	0 715 a
1082	%%BeginDocument: slides/bank.eps
1083	/$F2psDict 200 dict def
1084	$F2psDict begin
1085	$F2psDict /mtrx matrix put
1086	/col-1 {} def
1087	/col0 {0.000 0.000 0.000 srgb} bind def
1088	/col1 {0.000 0.000 1.000 srgb} bind def
1089	/col2 {0.000 1.000 0.000 srgb} bind def
1090	/col3 {0.000 1.000 1.000 srgb} bind def
1091	/col4 {1.000 0.000 0.000 srgb} bind def
1092	/col5 {1.000 0.000 1.000 srgb} bind def
1093	/col6 {1.000 1.000 0.000 srgb} bind def
1094	/col7 {1.000 1.000 1.000 srgb} bind def
1095	/col8 {0.000 0.000 0.560 srgb} bind def
1096	/col9 {0.000 0.000 0.690 srgb} bind def
1097	/col10 {0.000 0.000 0.820 srgb} bind def
1098	/col11 {0.530 0.810 1.000 srgb} bind def
1099	/col12 {0.000 0.560 0.000 srgb} bind def
1100	/col13 {0.000 0.690 0.000 srgb} bind def
1101	/col14 {0.000 0.820 0.000 srgb} bind def
1102	/col15 {0.000 0.560 0.560 srgb} bind def
1103	/col16 {0.000 0.690 0.690 srgb} bind def
1104	/col17 {0.000 0.820 0.820 srgb} bind def
1105	/col18 {0.560 0.000 0.000 srgb} bind def
1106	/col19 {0.690 0.000 0.000 srgb} bind def
1107	/col20 {0.820 0.000 0.000 srgb} bind def
1108	/col21 {0.560 0.000 0.560 srgb} bind def
1109	/col22 {0.690 0.000 0.690 srgb} bind def
1110	/col23 {0.820 0.000 0.820 srgb} bind def
1111	/col24 {0.500 0.190 0.000 srgb} bind def
1112	/col25 {0.630 0.250 0.000 srgb} bind def
1113	/col26 {0.750 0.380 0.000 srgb} bind def
1114	/col27 {1.000 0.500 0.500 srgb} bind def
1115	/col28 {1.000 0.630 0.630 srgb} bind def
1116	/col29 {1.000 0.750 0.750 srgb} bind def
1117	/col30 {1.000 0.880 0.880 srgb} bind def
1118	/col31 {1.000 0.840 0.000 srgb} bind def
1119
1120	end
1121	save
1122	-53.0 355.0 translate
1123	1 -1 scale
1124
1125	/clp {closepath} bind def
1126	/ef {eofill} bind def
1127	/gr {grestore} bind def
1128	/gs {gsave} bind def
1129	/l {lineto} bind def
1130	/m {moveto} bind def
1131	/n {newpath} bind def
1132	/s {stroke} bind def
1133	/slc {setlinecap} bind def
1134	/slj {setlinejoin} bind def
1135	/slw {setlinewidth} bind def
1136	/srgb {setrgbcolor} bind def
1137	/rot {rotate} bind def
1138	/sc {scale} bind def
1139	/tr {translate} bind def
1140	/tnt {dup dup currentrgbcolor
1141	4 -2 roll dup 1 exch sub 3 -1 roll mul add
1142	4 -2 roll dup 1 exch sub 3 -1 roll mul add
1143	4 -2 roll dup 1 exch sub 3 -1 roll mul add srgb}
1144	bind def
1145	/shd {dup dup currentrgbcolor 4 -2 roll mul 4 -2 roll mul
1146	4 -2 roll mul srgb} bind def
1147	/$F2psBegin {$F2psDict begin /$F2psEnteredState save def} def
1148	/$F2psEnd {$F2psEnteredState restore end} def
1149
1150	$F2psBegin
1151	10 setmiterlimit
1152	0.06000 0.06000 sc
1153	n gs
1154	900 675 tr
1155	14.849095 -14.745763 sc
1156	0 -354 tr
1157	0 0 tr
1158	save
1159	/showpage {} def
1160	497 354 sc
1161	/byte 1 string def
1162	/color 3 string def
1163	systemdict /colorimage known { /cnt 3 def } { /cnt 1 def } ifelse
1164	/String 256 cnt mul string def
1165	/DecodePacket % Decode color packet *
1166	{
1167	currentfile byte readhexstring pop 0 get
1168	/Nbyte exch 1 add cnt mul def
1169	/color ColorMap currentfile byte readhexstring pop 0 get get def
1170	String dup
1171	0 cnt Nbyte 1 sub { color putinterval dup } for
1172	pop 0 Nbyte getinterval
1173	} bind def
1174	/DisplayImage % Display run-length encoded color image *
1175	{
1176	gsave
1177	currentfile String readline pop
1178	token { /columns exch def } { } ifelse
1179	token { /rows exch def pop } { } ifelse
1180	currentfile String readline pop
1181	token { /Ncol exch def pop } { } ifelse
1182	/ColorMap Ncol array def
1183	systemdict /colorimage known {
1184	0 1 Ncol 1 sub {
1185	ColorMap exch
1186	currentfile 3 string readhexstring pop put
1187	} for
1188	columns rows 8
1189	[ columns 0 0 rows neg 0 rows ]
1190	{ DecodePacket } false 3 colorimage
1191	}{
1192	0 1 Ncol 1 sub {
1193	ColorMap exch
1194	1 string dup 0
1195	currentfile color readhexstring pop pop
1196	color 0 get 0.299 mul
1197	color 1 get 0.587 mul add
1198	color 2 get 0.114 mul add
1199	cvi put put
1200	} for
1201	columns rows 8
1202	[ columns 0 0 rows neg 0 rows ]
1203	{ DecodePacket } image
1204	} ifelse
1205	grestore
1206	} bind def
1207	DisplayImage
1208	497 354
1209	8
1210	ffffff 000000 ff0000 fffc00 00cdca 008a89 000000 000000
1211	ff00ff0030000001ff00df000f0100000f01ff00c900050120000501ff00bd0005012c00
1212	0501ff00b300030138000301ff00ac0003013e000301ff00a500030146000301ff009f00
1213	01014e000101ff009a00020152000201ff009500010158000101ff00910001015c000101
1214	ff008d00010160000101ff008900010164000101ff008600000168000001ff0083000101
1215	6a000101ff00800001016c000101ff007e000001030001012d0000011200000127000001
1216	ff007c0000010300000101000001020000011c0000010a00000112000001080000011e00
1217	0001ff007a00010103000001090000010000010102000201010000010000010102000201
1218	080002010300000109000201020003010000000102000001070003010100020101000001
1219	000001010b000101ff007800000104000201040000010200010101000001040000010000
1220	01010100000100000001020000010200000106000001020000010c000001000000010200
1221	000100000001020000010200000102000001040000010200000100000101010000010c00
1222	0001ff007600010105000001050000010200000102000001010003010000000102000001
1223	000000010600000103000301020000010900030100000001020000010000000102000001
1224	020000010300020101000001020000010000000110000101ff0075000001060000010500
1225	000102000001020000010000000102000001000000010200000100000001060000010200
1226	000102000001020000010800000102000001000000010200000101000001000000010300
1227	00010600000100000001020000010000000111000001ff00740000010700000105000001
1228	020000010200000101000301000000010200000101000301020000010300030102000001
1229	0900030101000301020000010400000102000301020002010100000112000001ff007300
1230	00017a000001ff00720000013d00040139000001ff00710000017c000001ff0071000001
1231	7c000001ff00710000017c000001ff00700001017c000101ff00700000017c000001ff00
1232	710000017c000001ff00710000017c000001ff007100000131000001010002010a000001
1233	01000401000000012f000001ff00720000012f0000010100000102000001040000010200
1234	010105000001010000012d000001ff00730000012e000001060000010300000102000001
1235	0000000104000001030000012c000001ff00740000012d00000105000001030000010200
1236	00010100000104000001030000012b000001ff00750001012c0000010400000103000001
1237	0300040102000001040000012a000101ff00760000012d00000102000001030000010700
1238	000103000001030000012b000001ff00780001012c000001000004010900000103000001
1239	020000012a000101ff007a00000172000001ff007c00000170000001ff007e0001016c00
1240	0101ff00800001016a000101ff008300000168000001ff008600010164000101ff008900
1241	010160000101ff008d0001015c000101ff009100010158000101ff009500020152000201
1242	ff009a0001014e000101ff009f00030146000301ff00a50003013e000301ff00ac000301
1243	38000301ff00b30005012c000501ff00bd00050120000501ff00c9000f0100000f01ff00
1244	df000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00
1245	ef000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00
1246	ef000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00
1247	ef000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00ef000001ff00
1248	ef000001ff00ef000001ff00ef000001ff00ec000601ff00e9000601ff00e9000601ff00
1249	e9000601ff00ea000401ff00eb000401ff00eb000401ff00ec000201ff00ed000201ff00
1250	ed000201ff00ee000001ff00ef0000037f00000170003404320048024000180363000f01
1251	00000f015e0001043400010430000002460000023b002203580005012000050156000104
1252	380001042e0000024600000237002a034f0004012c0004014f0001043c0001042c000002
1253	4600000234003003480003013600030149000104400001042a0000024600000231003603
1254	420003013c000301430002044400020427000002460000022e003c033b00030144000301
1255	3d0001044a00010425000002460000022c004003370002014a000201390001044e000104
1256	23000002460000022a004403320002015000020134000104520001042100000246000002
1257	290046032f0002015400020130000104560001041f00000246000002280048032d000001
1258	5a0000012d0001045a0001041d0000024600000226004c03290001015c00010128000204
1259	5e0002041a00000246000002240050032500010160000101240001046400010418000002
1260	460000022300520323000001640000012100010468000104160000024600000222005403
1261	20000101660001011d0001046c0001041400000246000002210056031e0000016a000001
1262	1a00010470000104120000024600000220003003000126031c000001090000011c000001
1263	4300000117000104140000051c00000518000005080000051c0001041000000214000002
1264	0a000002040000021e00000220003003000126031b0000010a0000011c00000144000001
1265	16000004090000050a0000051c0000051800000502000005040000051d00000410000002
1266	140000020a000002040000021e0000021f000c0302010203020102030201020302010103
1267	000102030001000300010003010101030401060300010003010102030201010303010e03
1268	190000010b00030101000001000001010200020101000001000001010200020101000301
1269	070001010000000102000201010000010000010102000201020002010200020101000001
1270	0000010112000001150000040d0000050000010501000405010002050100000500000105
1271	010000050000010502000205030000050900020501000005020000050100030506000405
1272	010002050100000500000105100000041000000212000402010002020300000204000002
1273	030002020100000200000102110000021e00100300010003000102030001000300010203
1274	000100030001020300010003000102030001000301010103000102030001080301010103
1275	0001000300010203000100030001020300010e03170000010c0000010200000100000101
1276	010000010400000100000101010000010000000102000001000000010200000106000001
1277	000000010000000104000001000001010100000104000001000000010200000100000001
1278	020000010000010101000001120000011400000409000005020001050100000502000005
1279	02000005020000050000010501000005000001050100000504000005020000050c000005
1280	000000050200000500000005020000050200000504000005020000050200000500000105
1281	010000050f00000410000002140000020200000202000002020000020400000202000002
1282	020000020000010201000002100000021e000d0303010003000104030001040300010203
1283	000100030001020300010003000102030001020300010803000104030301010300010203
1284	00010e03160001010c000001020000010000000105000301000000010200000100000001
1285	040000010200000106000001000000010000000101000301000000010200000101000301
1286	000000010200000100000301010000011600010113000004090000050200000502000005
1287	020000050200030501000005040000050200000501000305020000050900030500000005
1288	020000050000000502000005020000050400000502000005020000050000000513000004
1289	10000002140000020200030203000002040000020200030201000002140000021d000d03
1290	000102030001000300010403000104030001020300010003000102030001000300010203
1291	000102030001080300010403000104030001020300010f03150000010d00000102000001
1292	000000010400000102000001000000010200000100000001040000010200000106000001
1293	000000010000000100000001020000010000000102000001000000010200000100000001
1294	020000010000000104000001170000011300000409000005020000050200000502000005
1295	020000050400000504000005020000050000000502000005020000050800000502000005
1296	000000050200000500000005020000050200000504000005020000050200000500000005
1297	130000041000000214000002020000020600000204000002020000020400000214000002
1298	1d000e030301010303010103030101030201020302010103000102030001030301010603
1299	000105030201010303011003140000010e00030101000001050003010000000102000001
1300	010003010000000102000001060000010000000100000001010003010000000102000001
1301	010003010100030101000201010000011800000112000004090000050200000502000005
1302	030001050100020501000005040000050200000501000305020000050900030501000205
1303	020003050200000505000105010002050100000513000004100000021500010201000202
1304	03000002040000020300020201000002140000021c004a03000114031300000154000001
1305	20000001120000047600000410000002460000021c00380304010c030001140312000001
1306	33000401190002012200000111000004370004053900000410000002460000021c006003
1307	1200000178000001110000047600000410000002460000021c0060031200000178000001
1308	110000047600000410000002460000021c00600312000001780000011100000476000004
1309	10000002460000021b006203100001017800010110000004760000041000000246000002
1310	1c0060031200000178000001110000047600000410000002460000021c00600312000001
1311	78000001110000047600000410000002460000021c006003120000017800000111000004
1312	7600000410000002460000021c0020030001010302010903000103030201020302010103
1313	00011e03120000012f000001010002010800020102000201010000012d00000111000004
1314	320000050100020507000405000000052e00000410000002130000020100020209000002
1315	030002020200020201000002110000021c001f0300010103000102030001040300010103
1316	010102030001020300010003000102030001010300011d03130000012d00000101000001
1317	020000010400000100000001020000010000000102000001010000012b00000112000004
1318	3100000501000005020000050400000500000005050000052d0000041000000212000002
1319	010000020200000204000002010001020200000202000002000000020200000201000002
1320	100000021d001d0300010603000103030001030300010203000101030101000300010103
1321	0101020300011b03140000012c0000010600000103000001050000010400000102000001
1322	2a000001120000043000000502000005010001050300000501000305030000052c000004
1323	100000021100000206000002030000020300000202000002010001020000000201000102
1324	020000020f0000021d001d03000104030101030300010403000102030001000300010003
1325	0001000300010003000100030001020300011b03150000012b0000010500000103000001
1326	040001010400000103000001290000011300000430000005020000050000000500000005
1327	0200000506000005020000052c0000041000000211000002050000020300000204000002
1328	020000020000000200000002000000020000000200000002020000020f0000021e001c03
1329	000106030001010300010503000102030101010300010003010101030001020300011a03
1330	160001012a00000104000001030000010700000102000001040000012800010113000004
1331	3000000502000105010000050100000507000005020000052c0000041000000211000002
1332	04000002030000020500000202000102010000020000010201000002020000020f000002
1333	1e001d030001010300010203000100030001060300010203000102030001000300010203
1334	0001010300011b03170000012b0000010200000103000001040000010200000101000001
1335	040000012900000114000004310000050100000502000005000000050400000502000005
1336	010000052d00000410000002120000020200000203000002060000020200000202000002
1337	000000020200000201000002100000021f001d0300010103020108030201020302010203
1338	0201010300011b03190000012b0000010000040107000201010004010000000129000001
1339	15000004320000050100020508000205010000052e000004100000021300000200000402
1340	0700020202000202020002020100000211000002200058031b0000016e00000116000004
1341	760000041000000246000002200058031c0000016c000001170001047400010410000002
1342	46000002210056031e0000016a0000011a00010470000104120000024600000222005403
1343	20000101660001011d0001046c0001041400000246000002230052032300000164000001
1344	210001046800010416000002460000022400500325000101600001012400010464000104
1345	180000024600000226004c03290001015c000101280002045e0002041a00000246000002
1346	280048032d0000015a0000012d0001045a0001041d00000246000002290046032f000201
1347	5400020130000104560001041f000002460000022a004403000131000201500002013400
1348	01045200010421000002460000022c00400302000101320002014a000201390001044e00
1349	010423000002460000022e003c030600000133000301440003013d0001044a0001042500
1350	000246000002310036030a000101350003013c0003014300020444000204270000024600
1351	0002340030030f000101360003013600030149000104400001042a000002460000023700
1352	2a0314000001390004012c0004014f0001043c0001042c000002460000023b0022031900
1353	01013c00050120000501560000010004380001042e000002460000024000180320000001
1354	41000f0100000f015b00000101000104340001042f000101460000024c0000032d000101
1355	4f0000010800000160000001040034042e000201000048027d000101570000015f000001
1356	66000201cc000001570000015d00000164000201d0000101550000015c00000161000301
1357	d5000001540000015a0001015f000201da00010153000001580000015e000201df000101
1358	51000001570000015c000201e4000001500000015500010159000301e80001014f000001
1359	5300000158000201ee0001014d0000015200000156000201f30001014b00000151000001
1360	54000201f80001014a0000014f00000151000301fd000001490000014e0000014f000201
1361	ff0002000101470000014d0000014c000301ff0007000101460000014b00000149000301
1362	ff000d000101440000014a00000146000301ff0013000101420000014800010142000401
1363	ff001900000142000001460000013f000401ff001f00010140000001450000013c000301
1364	ff00260001013e0000014400000138000401ff002c0001013d0000014200000135000301
1365	ff00330001013b0000014100000132000301ff00390000013a000001400000012f000301
1366	ff003e000101390000013e0000012d000201ff0044000101370000013c0001012a000301
1367	ff0049000101350000013b00000129000201ff004f000101340000013900000126000301
1368	ff0054000001330000013800000122000401ff0059000101310000010100000133000101
1369	1f000301ff006000010130000201320000011d000301ff00660001012b00050131000001
1370	1b000201ff006c000101290005013000000118000301ff0071000001290004012f000001
1371	16000201ff0076000101280003012e00000114000201ff007b000101270002012d000001
1372	12000201ff00800001012500020128000001020000010f000301ff008500010124000101
1373	28000001000001010d000201ff008b00000124000001270002010c000201ff000e007402
1374	0b00010123000001070000011c0004010800020141000001ce000002720000020d000001
1375	2100140111000601000000010300010137001a01c1000002720000020e00010102000001
1376	16000401140004010c0004010100010102000001340004011a000401bc00000272000002
1377	1000010100000101120003011c00030108000301020005013000040124000401b7000002
1378	72000002120003010e0002012400020104000201030004012f0002012e000201b4000002
1379	72000002110005010b0002012800020101000001050006012b00020134000201b1000002
1380	7200000210000701080001012e00010105000801270002013a000201ae00000272000002
1381	130005010500010132000101020004012a00010140000101ac0000027200000216000301
1382	02000101360002012d00010144000101aa000002720000021a0000010000010138000101
1383	2b00010148000101a8000002720000021b0000013c000001290000014c000001a7000002
1384	72000002190001013e000101250001014e000101a5000002720000021800010140000101
1385	2200010152000101a30000027200000217000101420001012000010154000101a2000002
1386	7200000216000101440001011e00010156000101a1000002720000021500010146000101
1387	1c0000015a000001a000000232000002080000020c000002060000021e00000215000001
1388	20000001260000011b0000011f0000010c000001200000010b0000019f00000232000002
1389	080000020c000002060000021e0000021400000121000001270000011900000108000001
1390	10000001040000010c000001200000010c0000019e0000020d0002020200020202000202
1391	020002020100000202000002000000020000010201000402060003020200020203000002
1392	0300030201000202010000020000010213000002130001010e0002010100010100000001
1393	010003010300000103000201010000010200000101000201020002010e00010117000101
1394	0c0000010000010101000001020000010600040101000201020003010700020101000001
1395	020000010100020102000301000004010a0001019d000002100000020000000202000002
1396	000000020200000200000002020000020000000202000002000001020100000202000002
1397	080000020200000200000002020000020200000202000002020000020000000202000002
1398	000001020100000212000002130000010e00000102000001000000010000000100000001
1399	000000010200000102000001020000010200000100000001020000010000000102000001
1400	00000001020000010e000001160001010900000102000101010000010000000102000001
1401	020000010400000102000001020000010000000102000001060000010200000100000001
1402	02000001000000010200000100000001060000010d0001019c0000020d00030200000002
1403	040000020400000202000002000000020200000200000002020000020200000208000002
1404	020000020000000202000002020000020200000202000002000003020100000216000002
1405	120001010e00030101000001000000010000000100000001020000010200000102000001
1406	02000001000000010200000100000301010003010f000101150000010a00000102000001
1407	020000010000000102000001020000010400000102000301010000010200000106000001
1408	0200000100000001020000010000030102000201030000010e0000019c0000020c000002
1409	020000020000000204000002040000020200000200000002020000020000000202000002
1410	020000020800000202000002000000020200000202000002020000020200000200000002
1411	0400000216000002120000010f0000010400000100000001000000010000000102000001
1412	020000010200000102000001010000010000000101000001040000011300000114000101
1413	0a0000010200000102000001010000010000000103000001040000010200000104000001
1414	02000001060000010200000100000001020000010000000108000001020000010e000101
1415	9b0000020d00030201000302010003020100020202000202010000020200000203000102
1416	060000020200000201000202030000020300030201000202010000021600000212000001
1417	100002010100000100000001000000010000030103000001030002010300000103000201
1418	0200020110000001140000010b0000010200000102000001020000010400000105000101
1419	010002010200030107000301010002010200020101000301040001010d0000019b000002
1420	72000002110000011c000001110000011f000001120001013d000001250001019a000002
1421	3600040236000002110000011c0000011000000120000001120000013400040101000201
1422	270000019a00000272000002110000015000000112000001660000019a00000272000002
1423	110000015000000112000001660000019a00000272000002110000015000000112000001
1424	660000019a00000272000002100001015000010110000101660001019900000272000002
1425	110000015000000112000001660000019a00000272000002110000015000000112000001
1426	660000019a00000272000002110000015000000112000001660000019a00000230000002
1427	000004020600000202000002000000022c000002110000011f0000010000040106000001
1428	02000001000000011b000001120000012a00000101000201070000010200000100000001
1429	260000019a0000022f00000201000002080000020000000202000002010000022b000002
1430	110000011e00000101000001080000010000000102000001010000011a00000112000101
1431	28000001010000010200000104000001000000010200000101000001240001019a000002
1432	2e00000202000302040000020100000202000002020000022a000002120000011c000001
1433	020003010400000101000001020000010200000118000001140000012700000102000001
1434	0100010103000001010000010200000102000001230000019b0000022e00000206000002
1435	020000020200000202000002020000022a000002120000011c0000010600000102000001
1436	020000010200000102000001180000011400010126000001020000010000000100000001
1437	02000001020000010200000102000001220001019b0000022e0000020600000201000002
1438	0300000202000002020000022a000002120001011b000001060000010100000103000001
1439	020000010200000117000101150000012600000102000101010000010100000103000001
1440	0200000102000001220000019c0000022f00000201000002020000020000000204000002
1441	02000002010000022b000002130000011c00000101000001020000010000000104000001
1442	020000010100000118000001160001012600000101000001020000010000000104000001
1443	0200000101000001220001019c000002300000020100020208000202010000022c000002
1444	130001011c00000101000201080002010100000118000101170001012600000101000201
1445	0800020101000001220001019d00000272000002140000014a000001190000015e000001
1446	9e0000027200000215000001480000011b0000015c0000019f0000027200000215000101
1447	460001011c0000015a000001a00000027200000216000101440001011e00010156000101
1448	a10000027200000217000101420001012000010154000101a20000027200000218000101
1449	400001012200010152000101a300000272000002190001013e000101250001014e000101
1450	a5000002720000021b0000013c000001290000014c000001a7000002720000021c000101
1451	380001012b00010148000101a8000002720000021d000101360001012e00010144000101
1452	aa000002720000021f000101320001013200010140000101ac0000027200000221000101
1453	2e000101360002013a000201ae0000027200000223000201280002013b00020134000201
1454	b10000027200000225000201240002013d000001010002012e000201b400000272000002
1455	280003011c0003013f0000010500040124000401b7000002720000022b00040114000401
1456	400001010b0004011a000401bc00000272000002300014014400000112001a01c1007402
1457	3a0000014d00000120000001ff002c000001500000014c000001ff00500000014f000001
1458	4b000001ff00520001014d0000014a000001ff00550000014c00000149000001ff005700
1459	00014b00000148000001ff00590000014a00000146000101ff005b000101480000014500
1460	0001ff005f0000014700000143000101ff00610000014600000142000001ff0064000101
1461	4400000141000001ff00670000014300000140000001ff0069000101410000013f000001
1462	ff006c000001400000013e000001ff006e0000013f0000013d000001ff00700001013d00
1463	00013c000001ff00730000013c0000013a000101ff00750000013b00000139000001ff00
1464	780000013a00000138000001ff007a0000013900000137000001ff007c00000138000001
1465	36000001ff007e0000013700000134000101ff00800000013600000133000001ff008300
1466	01013400000132000001ff00860000013300000131000001ff0088000101310000012f00
1467	0101ff008b000001300000012e000001ff008e0000012c0006012a000001ff0090000101
1468	2a00060129000001ff00930000012900060128000001ff00950000012800060126000101
1469	ff00970000012800040126000001ff009a0001012600040125000001ff009d0000012500
1470	040124000001ff009f0000012500020123000101ff00a10000012400020122000001ff00
1471	a40001012200020121000001ff00a70000012200000121000001ff00a900000121000001
1472	1c00000102000001ff00ab00000102000001140010011400000100000101ff00ad000101
1473	00000001110002011000020110000201ff00b10002010d000201160002010c000401ff00
1474	af0004010a0002011a00020109000601ff00ad000601070002011e00020107000401ff00
1475	b1000401050002012200020104000301ff00b5000301030001012600010102000201ff00
1476	b9000201010000012a00000100000001ff00bf0001012c000101ff00bf0000012e000001
1477	ff00be00000130000001ff00bb00010132000101ff00b900000134000001ff00b8000101
1478	34000101ff00b600010136000101ff00b50000012200000114000001ff00b40001011000
1479	00010a0000010400000114000101ff00b300000109000001020000010700030106000401
1480	01000201010000010000010108000001ff00b20000010a00000102000001020000010200
1481	000106000001040000010200000102000001000001010100000108000001ff00b1000001
1482	0a0000010200000102000001030002010300000104000001020000010200000100000001
1483	0c000001ff00b10000010b00000100000001030000010600000102000001040000010200
1484	000102000001000000010c000001ff00b00000010d000001040000010200030103000001
1485	0500010101000201010000010d000001ff00af0000013e000001ff00af0000013e000001
1486	ff00af0000013e000001ff00af0000013e000001ff00af0000013e000001ff00ae000101
1487	3e000101ff00ae0000013e000001ff00af0000013e000001ff00af0000013e000001ff00
1488	af000001160000010100020107000001020000010000000112000001ff00af0000011500
1489	000101000001020000010400000100000001020000010100000111000001ff00af000001
1490	1400000102000001020000010300000101000001020000010200000110000001ff00b000
1491	00011300000103000301020000010200000102000001020000010f000001ff00b1000001
1492	1300000106000001010000010300000102000001020000010f000001ff00b10000011400
1493	0001040000010100000104000001020000010100000110000001ff00b200000114000001
1494	01000101090002010100000110000001ff00b300010138000101ff00b400000138000001
1495	ff00b500010136000101ff00b600010134000101ff00b800000134000001ff00b9000101
1496	32000101ff00bb00000130000001ff00be0000012e000001ff00bf0001012c000101ff00
1497	c10000012a000001ff00c400010126000101ff00c600020122000201ff00c90002011e00
1498	0201ff00cd0002011a000201ff00d100020116000201ff00d600020110000201ff00dc00
1499	1001ff00e7000001ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00
1500	ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff00ff003c00
1501	restore gr
1502	$F2psEnd
1503	restore
1504	%%EndDocument
1505	0 715 a
1506	endTexFig
1507	711 2133 a Fg(Figure)16 b(2:)22 b(Bank)16 b(Example)963 2828
1508	y(4)p eop
1509	%%Page: 5 5
1510	bop 0 203 a Fh(3)110 b(RBA)n(C)27 b(for)h(W)-7 b(orld)28 b(Wide)f(W)-7
1511	b(eb)28 b(Applications)0 313 y Fg(Role)13 b(Based)h(Access)f(Con)o(trol)h
1512	($RBA)o(C$)f(for)h(the)f(W)l(orld)h(Wide)f(W)l(eb)h($RBA)o(C/W)l(eb$)f
1513	(is)g(an)i(implem)o(en-)0 373 y(tation)21 b(of)f(RBA)o(C)g(for)g(use)h(b)o(y)
1514	f(W)l(orld)g(Wide)g(W)l(eb)g($W)l(eb$)g(serv)o(ers.)33 b(Because)20
1515	b(RBA)o(C/W)l(eb)f(places)0 433 y(no)g(requiremen)o(ts)c(on)k(a)g(bro)o
1516	(wser,)f(an)o(y)g(bro)o(wser)h(that)g(can)f(b)q(e)h(used)f(with)g(a)h
1517	(particular)f(W)l(eb)g(serv)o(er)0 493 y(can)h(b)q(e)f(used)h(with)f(that)h
1518	(serv)o(er)f(enhanced)g(with)h(RBA)o(C/W)l(eb.)27 b(RBA)o(C/W)l(eb)18
1519	b(is)g(implem)o(en)n(ted)e(for)0 554 y(b)q(oth)j(UNIX)d(\(e.g.,)h(for)i
1520	(Netscap)q(e,)e(NCSA,)g(CERN,)h(or)g(Apac)o(he)f(serv)o(ers\))h(and)g(Windo)o
1521	(ws)h(NT)e(\(e.g.,)0 614 y(for)g(In)o(ternet)d(Information)i(Serv)o(er,)e(W)l
1522	(ebSite,)h(or)i(Purv)o(ey)o(or\))e(en)o(vironmen)o(ts.)150
1523	674 y(Comp)q(onen)o(ts)h(of)h(RBA)o(C/W)l(eb)e(are)i(sho)o(wn)g(in)f(T)l
1524	(able)g(1.)22 b(RBA)o(C/W)l(eb)15 b(for)i(UNIX)d(uses)j(all)f(of)0
1525	734 y(the)e(comp)q(onen)o(ts)f(in)h(T)l(able)g(1.)21 b(Because)14
1526	b(built-in)f(NT)h(securit)o(y)f(mec)o(hanism)o(s)f(are)i(closely)f
1527	(compatible)0 794 y(with)22 b(RBA)o(C,)e(the)h(NT)h(v)o(ersion)f(uses)h(only)
1528	f(the)h(Database,)i(Session)e(Manager,)h(and)f(Admin)e(T)l(o)q(ol)0
1529	855 y(comp)q(onen)o(ts.)g(RBA)o(C/W)l(eb)c(for)g(NT)g(requires)f(no)h(mo)q
1530	(di\014cation)f(of)i(W)l(eb)f(serv)o(er)e(in)o(ternals)i(or)g(access)0
1531	915 y(to)h(source)f(co)q(de.)22 b(With)17 b(RBA)o(C/W)l(eb)e(for)i(UNIX,)d
1532	(there)i(are)h(t)o(w)o(o)f(w)o(a)o(ys)g(to)h(use)g(RBA)o(C/W)l(eb)e(with)i(a)
1533	0 975 y(UNIX)e(W)l(eb)h(serv)o(er.)150 1035 y(The)k(simplest)e(w)o(a)o(y)i
1534	(is)g(b)o(y)g(means)f(of)h(the)g(RBA)o(C/W)l(eb)f(CGI.)h(The)g(RBA)o(C/W)l
1535	(eb)g(CGI)g(can)0 1095 y(b)q(e)h(used)f(with)h(an)o(y)f(existing)g(UNIX)f
1536	(serv)o(er)h(without)h(mo)q(difying)e(its)h(source)h(co)q(de.)34
1537	b(RBA)o(C)20 b(URLs)0 1156 y(are)i(passed)h(through)g(the)f(W)l(eb)g(serv)o
1538	(er)f(and)i(pro)q(cessed)f(b)o(y)g(the)g(RBA)o(C/W)l(eb)f(CGI.)h(RBA)o(C/W)l
1539	(eb)0 1216 y(con\014guration)i(\014les)e(map)g(URLs)h(to)g(\014le)f(names,)h
1540	(while)f(pro)o(viding)g(access)g(con)o(trol)h(based)g(on)g(the)0
1541	1276 y(user's)d(roles.)31 b(Installation)20 b(of)g(the)f(RBA)o(C/W)l(eb)g
1542	(CGI)h(is)g(similar)d(to)k(the)e(installation)h(of)g(the)f(W)l(eb)0
1543	1336 y(serv)o(er.)150 1396 y(While)13 b(the)h(RBA)o(C/W)l(eb)f(CGI)i(is)f
1544	(relativ)o(ely)d(simple)h(to)j(install)e(and)i(use,)f(it)g(is)g(not)g(as)h
1545	(e\016cien)o(t)0 1457 y(as)j(p)q(erforming)e(access)h(con)o(trol)f(directly)g
1546	(in)g(the)h(W)l(eb)g(serv)o(er.)23 b(The)17 b(other)g(w)o(a)o(y)f(to)i(use)f
1547	(RBA)o(C/W)l(eb)0 1517 y(is)f(to)h(mo)q(dify)d(the)i(UNIX)f(W)l(eb)h(serv)o
1548	(er)f(to)h(call)g(the)g(RBA)o(C/W)l(eb)f(API)g(to)i(determine)d(RBA)o(C)h
1549	(access.)0 1577 y(A)f(URL)g(is)f(con\014gured)i(as)g(an)f(RBA)o(C)f(con)o
1550	(trolled)g(URL)h(b)o(y)g(means)f(of)h(the)g(W)l(eb)g(Serv)o(er)f
1551	(con\014guration)0 1637 y(\014les)j(that)g(map)g(URLs)g(to)h(\014le)f(names.)
1552	150 1697 y(Some)10 b(W)l(eb)i(serv)o(ers)e(for)i(a)g(UNIX)e(en)o(vironmen)o
1553	(t,)f(suc)o(h)i(as)h(Netscap)q(e)f(and)h(Apac)o(he,)g(divide)e(their)0
1554	1758 y(op)q(eration)17 b(in)o(to)f(steps)h(and)g(pro)o(vide)f(the)g
1555	(capabilit)o(y)f(for)h(eac)o(h)g(step)h(to)f(b)q(e)h(enhanced)f(or)h
1556	(replaced)f(b)o(y)0 1818 y(means)21 b(of)h(a)g(con\014guration)h(paramen)o
1557	(ters.)36 b(This)22 b(allo)o(ws)f(W)l(eb)h(serv)o(er)f(op)q(eration)h(to)g(b)
1558	q(e)g(mo)q(di\014ed)0 1878 y(without)17 b(ha)o(ving)g(to)g(c)o(hange)g(the)g
1559	(serv)o(er's)f(source)h(co)q(de.)23 b(F)l(or)17 b(these)g(W)l(eb)f(serv)o
1560	(ers,)g(the)h(RBA)o(C/W)l(eb)0 1938 y(API)f(can)h(b)q(e)g(in)o(tegrated)g(b)o
1561	(y)f(simply)f(pro)o(viding)h(the)h(appropriate)g(calling)f(sequence)g(and)h
1562	(mo)q(difying)0 1998 y(con\014guration)g(parameters.)0 2143
1563	y Fe(3.1)70 b(Authen)n(tication)0 2235 y Fg(RBA)o(C)14 b(is)g(an)i(access)f
1564	(con)o(trol)f(mec)o(hanism)e(that)j(can)g(b)q(e)g(used)g(in)g(conjunction)g
1565	(with)g(existing)f(WWW)0 2295 y(authen)o(tication)d(and)h(con\014den)o
1566	(tialit)o(y)d(services.)19 b(These)11 b(include)f(username/passw)o(ord,)i
1567	(Secure)f(So)q(c)o(k)o(et)0 2355 y(Library)19 b($SSL$,)f(Secure)g(HTTP)h
1568	($SHTTP$,)f(and)h(Priv)m(ate)g(Comm)o(unication)d(T)l(ec)o(hnology)i(Proto)
1569	q(col)0 2416 y($PCT$.)d(User)e(iden)o(ti\014cation)g(information)h(is)g
1570	(passed)h(to)g(RBA)o(C/W)l(eb)e(b)o(y)h(the)g(W)l(eb)h(serv)o(er.)k(It)14
1571	b(is)g(the)0 2476 y(resp)q(onsibilit)o(y)h(of)i(the)g(W)l(eb)f(serv)o(er)g
1572	(to)h(authen)o(ticate)f(user)h(iden)o(ti\014cation)e(information)h(and)h(pro)
1573	o(vide)0 2536 y(con\014den)o(tial)e(data)j(transmission)d(as)i(con\014gured)g
1574	(b)o(y)f(the)g(W)l(eb)g(serv)o(er)f(administrator.)963 2828
1575	y(5)p eop
1576	%%Page: 6 6
1577	bop 44 155 1863 2 v 43 336 2 181 v 68 197 a Fd(Database)p 521
1578	336 V 254 w Fg(Files)15 b(that)i(sp)q(ecify)e(the)h(relationship)g(b)q(et)o
1579	(w)o(een)g(users)g(and)h(roles,)f(the)547 258 y(role)j(hierarc)o(h)o(y)l(,)g
1580	(the)h(constrain)o(ts)g(on)h(user/role)f(relationships,)h(cur-)547
1581	318 y(ren)o(t)12 b(activ)o(e)f(roles,)i(and)g(relationship)f(b)q(et)o(w)o
1582	(een)g(roles)h(and)g(op)q(erations.)p 1906 336 V 44 337 1863
1583	2 v 43 699 2 362 v 68 380 a Fd(Database)19 b(Serv)n(er)p 521
1584	699 V 78 w Fg(Hosts)14 b(the)g(authoritativ)o(e)g(copies)g(of)h(the)f
1585	(\014les)g(whic)o(h)g(de\014ne)g(relation-)547 440 y(ships)j(b)q(et)o(w)o
1586	(een)f(users)i(and)f(roles,)g(the)g(role)g(hierarc)o(h)o(y)l(,)e(and)j(the)f
1587	(con-)547 500 y(strain)o(ts)g(on)h(user/role)f(relationships.)25
1588	b(These)17 b(\014les)h(are)f(created)g(and)547 560 y(main)o(tained)c(b)o(y)j
1589	(the)f(Admin)f(T)l(o)q(ol.)22 b(When)16 b(c)o(hanges)f(are)h(made)f(these)547
1590	620 y(\014les,)20 b(the)g(Database)i(Serv)o(er)d(noti\014es)h(the)h(W)l(eb)f
1591	(Serv)o(ers)f(to)i(up)q(date)547 681 y(their)15 b(cac)o(hed)h(copies.)p
1592	1906 699 V 44 700 1863 2 v 43 1001 2 301 v 68 742 a Fd(API)k(Library)p
1593	521 1001 V 175 w Fg(A)f(sp)q(eci\014cation)h(whic)o(h)f(ma)o(y)f(b)q(e)i
1594	(used)g(b)o(y)g(W)l(eb)g(serv)o(ers)f(and)h(CGIs)547 803 y(to)c(access)g(the)
1595	g(RBA)o(C/W)l(eb)g(Database.)23 b(The)16 b(API)g(is)g(the)g(means)f(b)o(y)547
1596	863 y(whic)o(h)d(RBA)o(C)g(ma)o(y)g(b)q(e)h(added)h(to)g(an)o(y)f(W)l(eb)g
1597	(serv)o(er)f(implem)o(en)o(tati)o(on.)547 923 y(The)j(API)g(Library)h(is)f(a)
1598	h(C)g(and)g(P)o(erl)f(library)g(whic)o(h)f(impleme)o(n)o(ts)f(the)547
1599	983 y(RBA)o(C/W)l(eb)i(API.)p 1906 1001 V 44 1003 1863 2 v
1600	43 1183 2 181 v 68 1045 a Fd(CGI)p 521 1183 V 374 w Fg(Implem)o(e)o(n)o(ts)21
1601	b(RBA)o(C)h(as)i(a)g(CGI)g(for)g(use)f(with)h(an)o(y)f(curren)o(tly)f(ex-)547
1602	1105 y(isting)f(W)l(eb)g(serv)o(er)g(without)h(ha)o(ving)f(to)h(mo)q(dify)f
1603	(the)g(serv)o(er.)37 b(The)547 1165 y(RBA)o(C/W)l(eb)15 b(CGI)h(uses)h(the)f
1604	(RBA)o(C/W)l(eb)f(API.)p 1906 1183 V 44 1185 1863 2 v 43 1306
1605	2 121 v 68 1227 a Fd(Session)20 b(Manager)p 521 1306 V 69 w
1606	Fg(Manages)12 b(the)g(RBA)o(C)f(Session.)20 b(The)12 b(RBA)o(C/W)l(eb)g
1607	(Session)g(Manager)547 1287 y(creates)j(and)i(remo)o(v)o(es)d(a)j(user's)f
1608	(curren)o(t)f(activ)o(e)g(role)h(set)g($ARS$.)p 1906 1306
1609	V 44 1307 1863 2 v 43 1608 2 301 v 68 1349 a Fd(Admin)k(T)-5
1610	b(o)r(ol)p 521 1608 V 186 w Fg(Allo)o(ws)14 b(serv)o(er)g(administrators)g
1611	(to)h(create)g(users,)g(roles,)f(and)i(p)q(ermit-)547 1410
1612	y(ted)c(op)q(erations;)i(asso)q(ciate)g(users)f(with)f(roles)h(and)g(roles)g
1613	(with)f(p)q(ermit-)547 1470 y(ted)21 b(op)q(erations;)j(sp)q(ecify)d
1614	(constrain)o(ts)h(on)g(user/role)f(relationships;)547 1530
1615	y(and)d(main)o(tain)e(the)h(RBA)o(C)f(Database.)27 b(Administrators)16
1616	b(access)i(the)547 1590 y(RBA)o(C/W)l(eb)d(Admin)f(T)l(o)q(ol)j(b)o(y)f
1617	(means)f(of)i(a)f(W)l(eb)h(bro)o(wser.)p 1906 1608 V 44 1610
1618	1863 2 v 552 1651 a Fd(T)-5 b(able)19 b(1.)25 b(RBA)n(C/W)-5
1619	b(eb)19 b(Comp)r(onen)n(ts)0 1846 y Fe(3.2)70 b(End-User)23
1620	b(Use)f(Scenario)0 1938 y Fg(End-user)f(in)o(teraction)f(with)h(a)g(W)l(eb)f
1621	(serv)o(er)g(enhanced)h(with)f(RBA)o(C/W)l(eb)g(is)h(basically)f(the)g(same)0
1622	1998 y(when)d(requesting)g(URLs)g(whose)h(access)f(is)g(not)h(con)o(trolled)e
1623	(b)o(y)h(RBA)o(C/W)l(eb)f($see)h(Figure)g(3$.)24 b(Ho)o(w-)0
1624	2058 y(ev)o(er,)14 b(b)q(efore)i(access)g(to)g(a)h(URL)f(con)o(trolled)e(b)o
1625	(y)i(RBA)o(C)f(is)g(p)q(ermitted,)f(end-users)i(m)o(ust)f(establish)h(an)0
1626	2118 y(RBA)o(C)i(session.)30 b(In)19 b(establishing)g(the)g(RBA)o(C)f
1627	(session,)h(end-users)h(c)o(ho)q(ose)f(and/or)i(are)e(assigned)h(a)0
1628	2179 y(curren)o(t)c(activ)o(e)g(role)g(set)h($ARS$.)f(The)h(ARS)g
1629	(determines)d(the)j(p)q(ermitted)e(op)q(erations)j(that)f(the)g(end-)0
1630	2239 y(user)f(can)h(p)q(erform)e(on)i(RBA)o(C)f(con)o(trolled)f(URLs.)22
1631	b(The)16 b(ARS)g(remains)f(in)h(e\013ect)g(un)o(til)g(the)g(end-user)0
1632	2299 y(establishes)g(a)h(new)f(ARS.)f(It)h(is)g(the)g(ARS)g(whic)o(h)f
1633	(constitutes)i(the)f(RBA)o(C)f(session.)150 2359 y(A)j(user)f(ma)o(y)g(b)q(e)
1634	h(assigned)h(roles)e(whic)o(h)h(ha)o(v)o(e)f(DSD)h(relationships.)27
1635	b(If)17 b(this)h(is)g(the)f(case,)h(the)0 2419 y(Session)c(Manager)g(enables)
1636	g(users)f(to)h(c)o(ho)q(ose)h(the)e(subset)h(of)g(their)f(assigned)h(role)f
1637	(set)h(that)g(they)f(w)o(ould)0 2480 y(lik)o(e)18 b(to)i(use)g(in)g(the)g
1638	(session.)33 b(Users)19 b(are)h(presen)o(ted)f(with)h(a)h(list)e(of)h
1639	(subsets)h(whic)o(h)e(do)h(not)h(violate)0 2540 y(an)o(y)c(DSD)i
1640	(relationships)e(and)h(ask)g(to)g(c)o(ho)q(ose.)25 b(In)18
1641	b(order)f(to)h(minimi)o(ze)c(the)j(n)o(um)o(b)q(er)f(of)i(c)o(hoices,)e(the)0
1642	2600 y(subsets)e(in)f(the)g(list,)g(tak)o(en)g(from)f(the)h(set)h(of)g(all)e
1643	(p)q(ossible)i(subsets)g(of)g(a)g(user's)f(assigned)h(roles,)f(con)o(tain)0
1644	2660 y(the)g(largest)h(subsets)g(whic)o(h)e(do)i(not)g(violate)f(an)o(y)g
1645	(DSD)h(relationships.)20 b(Once)13 b(the)g(c)o(hoice)f(is)h(made,)f(the)963
1646	2828 y(6)p eop
1647	%%Page: 7 7
1648	bop 0 154 a
1649	30983208 15919185 0 0 30983208 15919185 startTexFig
1650	0 154 a
1651	%%BeginDocument: hwdiag.eps
1652	/$F2psDict 200 dict def
1653	$F2psDict begin
1654	$F2psDict /mtrx matrix put
1655	/col-1 {} def
1656	/col0 {0.000 0.000 0.000 srgb} bind def
1657	/col1 {0.000 0.000 1.000 srgb} bind def
1658	/col2 {0.000 1.000 0.000 srgb} bind def
1659	/col3 {0.000 1.000 1.000 srgb} bind def
1660	/col4 {1.000 0.000 0.000 srgb} bind def
1661	/col5 {1.000 0.000 1.000 srgb} bind def
1662	/col6 {1.000 1.000 0.000 srgb} bind def
1663	/col7 {1.000 1.000 1.000 srgb} bind def
1664	/col8 {0.000 0.000 0.560 srgb} bind def
1665	/col9 {0.000 0.000 0.690 srgb} bind def
1666	/col10 {0.000 0.000 0.820 srgb} bind def
1667	/col11 {0.530 0.810 1.000 srgb} bind def
1668	/col12 {0.000 0.560 0.000 srgb} bind def
1669	/col13 {0.000 0.690 0.000 srgb} bind def
1670	/col14 {0.000 0.820 0.000 srgb} bind def
1671	/col15 {0.000 0.560 0.560 srgb} bind def
1672	/col16 {0.000 0.690 0.690 srgb} bind def
1673	/col17 {0.000 0.820 0.820 srgb} bind def
1674	/col18 {0.560 0.000 0.000 srgb} bind def
1675	/col19 {0.690 0.000 0.000 srgb} bind def
1676	/col20 {0.820 0.000 0.000 srgb} bind def
1677	/col21 {0.560 0.000 0.560 srgb} bind def
1678	/col22 {0.690 0.000 0.690 srgb} bind def
1679	/col23 {0.820 0.000 0.820 srgb} bind def
1680	/col24 {0.500 0.190 0.000 srgb} bind def
1681	/col25 {0.630 0.250 0.000 srgb} bind def
1682	/col26 {0.750 0.380 0.000 srgb} bind def
1683	/col27 {1.000 0.500 0.500 srgb} bind def
1684	/col28 {1.000 0.630 0.630 srgb} bind def
1685	/col29 {1.000 0.750 0.750 srgb} bind def
1686	/col30 {1.000 0.880 0.880 srgb} bind def
1687	/col31 {1.000 0.840 0.000 srgb} bind def
1688
1689	end
1690	save
1691	-57.0 295.0 translate
1692	1 -1 scale
1693
1694	/clp {closepath} bind def
1695	/ef {eofill} bind def
1696	/gr {grestore} bind def
1697	/gs {gsave} bind def
1698	/l {lineto} bind def
1699	/m {moveto} bind def
1700	/n {newpath} bind def
1701	/s {stroke} bind def
1702	/slc {setlinecap} bind def
1703	/slj {setlinejoin} bind def
1704	/slw {setlinewidth} bind def
1705	/srgb {setrgbcolor} bind def
1706	/rot {rotate} bind def
1707	/sc {scale} bind def
1708	/tr {translate} bind def
1709	/tnt {dup dup currentrgbcolor
1710	4 -2 roll dup 1 exch sub 3 -1 roll mul add
1711	4 -2 roll dup 1 exch sub 3 -1 roll mul add
1712	4 -2 roll dup 1 exch sub 3 -1 roll mul add srgb}
1713	bind def
1714	/shd {dup dup currentrgbcolor 4 -2 roll mul 4 -2 roll mul
1715	4 -2 roll mul srgb} bind def
1716	/DrawEllipse {
1717	/endangle exch def
1718	/startangle exch def
1719	/yrad exch def
1720	/xrad exch def
1721	/y exch def
1722	/x exch def
1723	/savematrix mtrx currentmatrix def
1724	x y tr xrad yrad sc 0 0 1 startangle endangle arc
1725	closepath
1726	savematrix setmatrix
1727	} def
1728
1729	/$F2psBegin {$F2psDict begin /$F2psEnteredState save def} def
1730	/$F2psEnd {$F2psEnteredState restore end} def
1731
1732	$F2psBegin
1733	10 setmiterlimit
1734	0.06000 0.06000 sc
1735	7.500 slw
1736	n 2925 3781 m 6000 3781 l gs col-1 s gr
1737	n 5880.00 3751.00 m 6000.00 3781.00 l 5880.00 3811.00 l gs col-1 s gr
1738	n 2925 4201 m 6000 4201 l gs col-1 s gr
1739	n 3045.00 4231.00 m 2925.00 4201.00 l 3045.00 4171.00 l gs col-1 s gr
1740	/Helvetica findfont 180.00 scalefont setfont
1741	4462 3976 m
1742	gs 1 -1 sc (URL) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1743	/Helvetica findfont 180.00 scalefont setfont
1744	4501 4426 m
1745	gs 1 -1 sc (response) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1746	n 2963 2251 m 6038 2251 l gs col-1 s gr
1747	n 5918.00 2221.00 m 6038.00 2251.00 l 5918.00 2281.00 l gs col-1 s gr
1748	/Helvetica findfont 180.00 scalefont setfont
1749	4464 2476 m
1750	gs 1 -1 sc (choose ARS) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1751	n 2963 1831 m 6038 1831 l gs col-1 s gr
1752	n 3083.00 1861.00 m 2963.00 1831.00 l 3083.00 1801.00 l gs col-1 s gr
1753	/Helvetica findfont 180.00 scalefont setfont
1754	4464 2056 m
1755	gs 1 -1 sc (present ARS choices) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1756	[66.7] 0 setdash
1757	n 3233 1643 m 2858 1643 l 2858 2618 l 3233 2618 l gs col-1 s gr [] 0 setdash
1758	[66.7] 0 setdash
1759	n 5783 2618 m 6158 2618 l 6158 1643 l 5783 1643 l gs col-1 s gr [] 0 setdash
1760	n 2925 2959 m 6000 2959 l gs col-1 s gr
1761	n 3045.00 2989.00 m 2925.00 2959.00 l 3045.00 2929.00 l gs col-1 s gr
1762	/Helvetica findfont 180.00 scalefont setfont
1763	4426 3184 m
1764	gs 1 -1 sc (session established) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1765	n 2962 1232 m 6037 1232 l gs col-1 s gr
1766	n 5917.00 1202.00 m 6037.00 1232.00 l 5917.00 1262.00 l gs col-1 s gr
1767	/Helvetica findfont 180.00 scalefont setfont
1768	4499 1427 m
1769	gs 1 -1 sc (establish RBAC session) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1770	n 1276 2147 m 2176 2147 l 2176 2747 l 1276 2747 l clp gs col-1 s gr
1771	n 1276 2747 m 976 3047 l 2476 3047 l 2176 2747 l gs col-1 s gr
1772	n 1456 2222 m 1351 2222 1351 2567 105 arcto 4 {pop} repeat 1351 2672 1996 2672 105 arcto 4 {pop} repeat 2101 2672 2101 2327 105 arcto 4 {pop} repeat 2101 2222 1456 2222 105 arcto 4 {pop} repeat clp gs col-1 s gr
1773	/Helvetica findfont 270.00 scalefont setfont
1774	1725 3346 m
1775	gs 1 -1 sc (user) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1776	/Helvetica findfont 180.00 scalefont setfont
1777	1741 2506 m
1778	gs 1 -1 sc (browser) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1779	n 7718 3564 525 112 0 360 DrawEllipse gs col-1 s gr
1780
1781	n 7718 2919 525 112 0 360 DrawEllipse gs col-1 s gr
1782
1783	n 7376 1934 550 550 0 360 DrawEllipse gs col-1 s gr
1784
1785	n 6630 901 m 8445 901 l 8445 4411 l 6630 4411 l clp gs col-1 s gr
1786	n 6315 4876 m 8760 4876 l gs col-1 s gr
1787	n 6301 4891 m 6631 4411 l gs col-1 s gr
1788	n 8776 4891 m 8446 4411 l gs col-1 s gr
1789	n 7718 2927 m 7418 2477 l gs col-1 s gr
1790	n 7689.71 2830.48 m 7718.00 2927.00 l 7639.79 2863.76 l 7651.94 2827.65 l 7689.71 2830.48 l clp gs 0.00 setgray ef gr gs col-1 s gr
1791	n 7446.29 2573.52 m 7418.00 2477.00 l 7496.21 2540.24 l 7485.06 2577.35 l 7446.29 2573.52 l clp gs 0.00 setgray ef gr gs col-1 s gr
1792	n 7193 2957 m 7193 3557 l gs col-1 s gr
1793	n 8243 2927 m 8243 3527 l gs col-1 s gr
1794	n 6856 1126 m 6751 1126 6751 4096 105 arcto 4 {pop} repeat 6751 4201 8221 4201 105 arcto 4 {pop} repeat 8326 4201 8326 1231 105 arcto 4 {pop} repeat 8326 1126 6856 1126 105 arcto 4 {pop} repeat clp gs col-1 s gr
1795	/Helvetica findfont 180.00 scalefont setfont
1796	7719 3228 m
1797	gs 1 -1 sc (RBAC) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1798	/Helvetica findfont 180.00 scalefont setfont
1799	7719 3423 m
1800	gs 1 -1 sc (Database) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1801	/Helvetica findfont 180.00 scalefont setfont
1802	7719 3603 m
1803	gs 1 -1 sc ($cached$) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1804	/Helvetica findfont 270.00 scalefont setfont
1805	7419 1878 m
1806	gs 1 -1 sc (web ) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1807	/Helvetica findfont 270.00 scalefont setfont
1808	7419 2148 m
1809	gs 1 -1 sc (server) dup stringwidth pop 2 div neg 0 rmoveto col-1 show gr
1810	$F2psEnd
1811	restore
1812	%%EndDocument
1813	0 154 a
1814	endTexFig
1815	691 1264 a Fg(Figure)16 b(3:)22 b(RBA)o(C/W)l(eb)15 b(Use)0
1816	1401 y(RBA)o(C)e(session)i(is)f(established)g(with)h(all)e(authorized)i
1817	(roles)f(\(i.e.,)f(assigned)i(roles)f(along)h(with)f(all)g(roles)0
1818	1461 y(whic)o(h)g(the)h(assigned)h(roles)e(inherit\))g(b)q(eing)h(placed)g
1819	(in)g(the)f(ARS.)g(If)h(there)f(are)h(no)h(DSD)f(relationships)0
1820	1521 y(among)f(the)g(roles)g(assigned)h(to)f(a)h(user,)f(then)g(the)g(RBA)o
1821	(C)f(session)h(is)g(automatically)e(established)i(with)0 1581
1822	y(all)i(authorized)g(roles)g(in)g(the)g(ARS.)150 1641 y(Generally)l(,)f(an)i
1823	(RBA)o(C)f(session)h(requires)f(an)h(authen)o(ticated)f(end-user.)23
1824	b(If)16 b(authen)o(tication)g(is)0 1702 y(remo)o(v)o(ed)g(from)h(an)h
1825	(end-user,)h(access)f(to)g(RBA)o(C)f(con)o(trolled)g(URLs)i(is)e(denied.)27
1826	b(Ho)o(w)o(ev)o(er,)16 b(end-user)0 1762 y(authen)o(tication)11
1827	b(and)h(the)e(establishmen)o(t)f(of)j(an)g(RBA)o(C)e(session)h(are)h
1828	(completely)c(separate)j(op)q(erations.)0 1822 y(This)16 b(is)g(so)h(that)g
1829	(RBA)o(C)e(W)l(eb)h(can)h(w)o(ork)f(with)g(an)o(y)g(authen)o(tication)g(mec)o
1830	(hanism.)0 1966 y Fe(3.3)70 b(Consistency)21 b(Principle)0
1831	2059 y Fg(The)16 b(RBA)o(C)g(mo)q(del)f(presen)o(ted)g(in)h(the)g(pap)q(er)h
1832	(do)q(es)g(not)g(preclude)e(the)h(dev)o(elopmen)o(t)e(of)i(inheritance)0
1833	2119 y(relationships)11 b(and)h(dynamic)e(separation)i(of)g(dut)o(y)f
1834	(relationships)h(among)f(roles)g(where)h(the)f(t)o(w)o(o)g(criteria)0
1835	2179 y(presen)o(ted)21 b(ab)q(o)o(v)o(e)h(are)g(in)g(con\015ict.)37
1836	b(F)l(or)23 b(example,)d Ff(R)j Fg(inherits)e Ff(R)1308 2161
1837	y Fc(0)1320 2179 y Fg(,)i(and)g Ff(R)f Fg(and)h Ff(R)1655 2161
1838	y Fc(0)1689 2179 y Fg(also)f(share)h(a)0 2239 y(dynamic)c(separation)i(of)g
1839	(dut)o(y)f(relationship.)34 b(In)20 b(this)h(example,)e(the)h(question)g
1840	(arises)h(as)g(to)g(what)0 2299 y(should)d(b)q(e)g(placed)g(in)f(the)h(ARS)f
1841	(when)h(a)g(user)g(who)h(is)e(assigned)i Ff(R)f Fg(establishes)g(an)g(RBA)o
1842	(C)f(session.)0 2360 y(Both)f(relationships)g(cannot)h(sim)o(ultaneously)d
1843	(hold)j(in)f(the)g(ARS.)150 2420 y(The)e(impleme)o(n)o(tation)e(answ)o(ers)j
1844	(this)f(question)g(b)o(y)g(not)h(p)q(ermitting)e(the)h(role)g(relationships)g
1845	(in)0 2480 y(this)h(example)e(to)i(b)q(e)g(de\014ned.)21 b(In)14
1846	b(the)h(implem)o(en)o(tati)o(on,)e(the)h(follo)o(wing)h(consistency)f
1847	(principle)g(holds)0 2540 y(in)i(all)g(cases)g(and)h(at)g(all)e(times:)150
1848	2600 y(The)i(inheritance,)f(static)h(separation)h(of)f(dut)o(y)l(,)g(and)h
1849	(dynamic)d(separation)j(of)f(dut)o(y)g(relation-)0 2661 y(ships)f(among)h
1850	(roles)f(are)g(alw)o(a)o(ys)g(consisten)o(t.)963 2828 y(7)p
1851	eop
1852	%%Page: 8 8
1853	bop 150 195 a Fg(There)20 b(are)h(no)g(scenarios)g(or)g(instances)f(in)h(the)
1854	f(op)q(eration)h(of)g(RBA)o(C/W)l(eb)f(where)g(one)h(re-)0
1855	255 y(lationship)i(o)o(v)o(errides)f(another.)42 b(This)23
1856	b(principle)f(assures)i(the)f(RBA)o(C)f(administrator)g(that)i(there)0
1857	315 y(are)18 b(no)g(\\hidden")g(rules)g(presen)o(t)f(in)g(the)h(implem)o(en)o
1858	(tation.)23 b(A)o(t)17 b(all)g(times)f(in)i(the)f(implem)o(en)o(tation's)0
1859	376 y(op)q(eration,)i(the)f(RBA)o(C/W)l(eb)g(Database)i(is)e(consisten)o(t)g
1860	(and)h(all)e(role)h(relationships)g(alw)o(a)o(ys)h(b)q(eha)o(v)o(e)0
1861	436 y(according)d(to)h(their)f(de\014nition)f(in)h(the)g(RBA)o(C)f(Database.)
1862	150 496 y(The)21 b(p)q(ermitted)e(op)q(erations)j(implem)o(e)o(n)o(ted)c(b)o
1863	(y)i(RBA)o(C/W)l(eb)g(are)h(the)f(\\metho)q(ds")h(de\014ned)0
1864	556 y(in)k(the)f(HTTP)i(proto)q(col)g(de\014nition.)47 b(These)25
1865	b(metho)q(ds)f(are)h(GET,)g(HEAD,)g(PUT,)f(POST,)h(etc.)0 616
1866	y(RBA)o(C/W)l(eb)c(con)o(trols)h(the)g(abilit)o(y)f(of)h(a)g(user)g(acting)h
1867	(in)e(a)i(role)e(to)i(p)q(erform)e(an)h(HTTP)h(metho)q(d)0
1868	677 y(on)17 b(a)f(URL.)0 843 y Fh(4)83 b(Conclusions)0 953
1869	y Fg(F)l(or)14 b(in)o(tranets)f(to)i(reac)o(h)e(their)g(full)g(p)q(oten)o
1870	(tial)h(as)g(a)g(means)f(for)h(en)o(terprise)f(computing,)g(access)g(con)o
1871	(trol)0 1013 y(mec)o(hanisms)d(m)o(ust)h(b)q(e)i(in)g(place)f(that)h(can)g
1872	(regulate)g(user)g(access)f(to)i(information)d(in)i(a)g(manner)f(that)h(is)0
1873	1073 y(consisten)o(t)h(with)h(the)f(curren)o(t)f(set)i(of)g(la)o(ws,)f
1874	(regulations,)h(and)g(practices)f(that)h(face)f(businesses)h(to)q(da)o(y)l(.)
1875	0 1133 y(The)h(purp)q(ose)h(of)f(RBA)o(C/W)l(eb)g(is)g(to)g(pro)o(vide)f
1876	(this)h(access)g(con)o(trol)g(service.)k(This)c(mak)o(es)e(it)i(p)q(ossible)0
1877	1193 y(to)g(use)f(the)h(w)o(eb)f(for)h(new)f(and)h(more)f(sophisticated)g
1878	(applications)h({)g(to)f(allo)o(w)h(access)f(to)h(information)0
1879	1253 y(and)k(other)f(resources)g(that)h(w)o(ould)f(otherwise)g(not)h(b)q(e)f
1880	(p)q(ossible)g(giv)o(en)g(the)f(existing)h(and)h(emerging)0
1881	1314 y(threat)c(en)o(vironmen)o(t.)150 1374 y(One)j(of)h(RBA)o(C's)e
1882	(greatest)i(virtues)f(is)h(the)f(administrativ)o(e)e(capabilities)h(it)h
1883	(supp)q(orts.)33 b(The)0 1434 y(administration)22 b(of)h(authorization)g
1884	(data)h(is)f(widely)f(ac)o(kno)o(wledged)g(as)h(an)h(onerous)g(pro)q(cess)f
1885	(with)0 1494 y(a)f(large)f(and)g(reo)q(ccurring)g(exp)q(ense.)36
1886	b(Under)20 b(RBA)o(C,)g(users)h(are)g(gran)o(ted)h(mem)n(b)q(ership)c(in)o
1887	(to)j(roles)0 1554 y(based)14 b(on)g(their)f(comp)q(etencies)f(and)i(resp)q
1888	(onsibilities.)19 b(User)13 b(mem)o(b)q(ership)e(in)o(to)i(roles)h(can)g(b)q
1889	(e)f(rev)o(ok)o(ed)0 1615 y(easily)i(and)i(new)f(mem)o(b)q(erships)d
1890	(established)j(as)h(job)f(assignmen)o(ts)g(dictate.)k(With)c(RBA)o(C,)f
1891	(users)h(are)0 1675 y(not)h(gran)o(ted)f(p)q(ermission)g(to)g(p)q(erform)g
1892	(op)q(erations)h(on)g(an)g(individual)e(basis,)h(rather,)g(op)q(erations)i
1893	(are)0 1735 y(asso)q(ciated)j(with)f(roles.)32 b(Role)20 b(asso)q(ciation)h
1894	(with)f(new)g(op)q(erations)h(can)f(b)q(e)g(established)g(as)h(w)o(ell)d(as)0
1895	1795 y(old)j(op)q(erations)h(deleted)d(as)j(organizational)f(functions)g(c)o
1896	(hange)g(and)g(ev)o(olv)o(e.)33 b(This)21 b(basic)f(concept)0
1897	1855 y(has)15 b(the)g(adv)m(an)o(tage)g(of)g(simplifying)d(the)j
1898	(understanding)g(and)g(managemen)o(t)e(of)i(privileges:)j(roles)d(can)0
1899	1916 y(b)q(e)h(up)q(dated)h(without)g(ha)o(ving)f(to)g(directly)f(up)q(date)h
1900	(the)g(privileges)f(for)h(ev)o(ery)f(user)h(on)h(an)f(individual)0
1901	1976 y(basis.)150 2036 y(RBA)o(C/W)l(eb)j(pro)o(vides)g(the)h(adv)m(an)o
1902	(tages)h(of)f(role)g(based)g(access)g(con)o(trol)g(for)g(in)o(tranet)f(en)o
1903	(vi-)0 2096 y(ronmen)o(ts,)k(and)h(can)f(b)q(e)g(incorp)q(orated)h(in)o(to)e
1904	(existing)g(systems)g(with)h(no)h(mo)q(di\014cation)e(to)h(serv)o(er)0
1905	2156 y(co)q(de,)18 b(making)f(it)h(p)q(ortable)g(to)h(virtually)d(all)i(w)o
1906	(eb)f(serv)o(ers.)26 b(F)l(or)18 b(more)f(information)g(on)i(RBA)o(C)d(and)0
1907	2217 y(RBA)o(C/W)l(eb,)f(see)h(h)o(ttp://hissa.nist.go)o(v/rbac.)0
1908	2383 y Fh(Disclaimer)0 2492 y Fg(Because)21 b(of)h(the)g(nature)g(of)g(this)g
1909	(rep)q(ort,)i(it)d(is)h(necessary)f(to)i(men)o(tion)d(v)o(endors)h(and)i
1910	(commerci)o(al)0 2553 y(pro)q(ducts.)45 b(The)24 b(presence)f(or)i(absence)f
1911	(of)g(a)g(particular)g(trade)g(name)f(pro)q(duct)h(do)q(es)h(not)f(imply)0
1912	2613 y(criticism)12 b(or)j(endorsemen)o(t)e(b)o(y)h(the)h(National)g
1913	(Institute)f(of)h(Standards)h(and)g(T)l(ec)o(hnology)l(,)e(nor)i(do)q(es)f
1914	(it)0 2673 y(imply)f(that)j(the)f(pro)q(ducts)h(iden)o(ti\014ed)d(are)j
1915	(necessarily)e(the)h(b)q(est)g(a)o(v)m(ailable.)963 2828 y(8)p
1916	eop
1917	%%Page: 9 9
1918	bop 0 203 a Fh(References)0 313 y Fg([1])24 b(D.)d(F)l(erraiolo)h(and)g(D.R.)
1919	f(Kuhn.)37 b(Role)21 b(based)h(access)g(con)o(trol.)36 b(In)22
1920	b Fb(15th)g(National)h(Computer)76 373 y(Se)n(curity)18 b(Confer)n(enc)n(e)p
1921	Fg(.)e(NIST/NSA,)f(1992.)0 475 y([2])24 b(D.F.)17 b(Sterne.)26
1922	b(A)18 b(tcb)f(subset)i(for)f(in)o(tegrit)o(y)e(and)j(role-based)f(access)g
1923	(con)o(trol.)26 b(In)18 b Fb(15th)h(National)76 535 y(Computer)e(Se)n(curity)
1924	h(Confer)n(enc)n(e)p Fg(.)e(NIST/NSA,)f(1992.)0 637 y([3])24
1925	b(R.)c(Sandh)o(u,)i(E.J.)e(Co)o(yne,)i(H.L.)e(F)l(einstein,)g(and)h(C.E.)g(Y)
1926	l(ouman.)34 b(Role)20 b(based)i(access)e(con)o(trol)76 697
1927	y(mo)q(dels.)g Fb(IEEE)d(Computer)p Fg(,)f(29$2$,)h(F)l(ebruary)f(1996.)0
1928	799 y([4])24 b(S.H.)19 b(v)o(on)h(Solms)f(and)h(I.)g(v)m(an)g(der)g(Merv)o
1929	(e.)31 b(The)20 b(managemen)o(t)e(of)j(computer)d(securit)o(y)h(pro\014les)76
1930	859 y(using)d(a)h(role)f(orien)o(ted)f(approac)o(h.)22 b Fb(Computers)17
1931	b(and)h(Se)n(curity)p Fg(,)e(13$8$,)h(1994.)0 960 y([5])24
1932	b(D.)17 b(F)l(erraiolo,)g(J.)g(Cugini,)g(and)h(D.R.)f(Kuhn.)25
1933	b(Role)17 b(based)g(access)h(con)o(trol:)23 b(F)l(eatures)17
1934	b(and)h(moti-)76 1021 y(v)m(ations.)g(In)c Fb(A)o(nnual)j(Computer)e(Se)n
1935	(curity)h(Applic)n(ations)g(Confer)n(enc)n(e)p Fg(.)e(IEEE)h(Computer)e(So)q
1936	(ciet)o(y)76 1081 y(Press,)j(1995.)0 1183 y([6])24 b(R.)14
1937	b(Sandh)o(u,)h(E.J.)f(Co)o(yne,)g(and)i(C.E.)e(Y)l(ouman,)f(editors.)19
1938	b Fb(Pr)n(o)n(c)n(e)n(e)n(dings)c(of)h(the)g(First)g(A)o(CM)f(Work-)76
1939	1243 y(shop)i(on)h(R)n(ole)f(Base)n(d)g(A)n(c)n(c)n(ess)h(Contr)n(ol)p
1940	Fg(.)d(A)o(CM,)g(1996.)0 1409 y Fh(App)r(endix)27 b(-)h(RBA)n(C)e(F)-7
1941	b(ormal)26 b(Description)0 1519 y Fg(This)17 b(section)g(summarizes)d(the)j
1942	(fundamen)o(tal)e(rules)i(of)g(RBA)o(C)f($based)i(on)f(those)g(in)g([5]$)g
1943	(as)g(used)g(in)0 1579 y(RBA)o(C/W)l(eb.)i(RBA)o(C)13 b(is)h(a)g(mec)o
1944	(hanism)c(that)k(can)g(implem)o(en)o(t)d(a)j(v)m(ariet)o(y)e(of)i(p)q
1945	(olicies,)f(but)h(separation)0 1639 y(of)d(dut)o(y)g(p)q(olicies)f(are)h
1946	(often)g(closely)f(tied)g(to)i(RBA)o(C)e(mo)q(dels,)g(b)q(ecause)h
1947	(separation)h(of)g(dut)o(y)e(is)h(critical)e(in)0 1699 y(most)14
1948	b(commerc)o(ial)d(applications,)k(and)g(b)q(ecause)g(RBA)o(C)e(is)h(a)h
1949	(natural)g(mec)o(hanism)d(for)i(impleme)o(n)o(ting)0 1759 y(separation)j(of)g
1950	(dut)o(y)l(.)j(Tw)o(o)d(forms)e(of)i(separation)g(of)g(dut)o(y)e(are)i
1951	(describ)q(ed)e(in)h(this)g(app)q(endix.)0 1869 y(V)l(ariables)g(used)g(are)g
1952	(sho)o(wn)h(with)f(their)g(t)o(yp)q(es)g(b)q(elo)o(w:)150 1979
1953	y Ff(s)e Fg(:)f Ff(subj)s(ect)150 2040 y(i;)8 b(j)16 b Fg(:)e
1954	Ff(r)q(ol)q(e)150 2100 y(p)g Fg(:)g Ff(pr)q(iv)r(il)q(eg)r(e)150
1955	2160 y(u)g Fg(:)f Ff(user)0 2270 y Fg(The)j(follo)o(wing)g(de\014nitions)g
1956	(are)h(used:)0 2380 y(Sub)s(jects:)150 2440 y Ff(U)5 b Fg([)p
1957	Ff(s)p Fg(])16 b(=)g(the)g(user)g Ff(u)g Fg(asso)q(ciated)h(with)f(sub)s
1958	(ject)g Ff(s)150 2500 y(R)p Fg([)p Ff(s)p Fg(])g(=)g(the)g(set)g(of)h(roles)f
1959	(for)g(whic)o(h)g(sub)s(ject)g Ff(s)g Fg(is)g(authorized)150
1960	2561 y Ff(A)p Fg([)p Ff(s)p Fg(])f(=)h(the)g(curren)o(t)f(list)h(of)h(activ)o
1961	(e)d(roles)j(for)f(sub)s(ject)g Ff(s)0 2671 y Fg(Roles:)963
1962	2828 y(9)p eop
1963	%%Page: 10 10
1964	bop 150 195 a Ff(M)5 b Fg([)p Ff(i)p Fg(])15 b(=)i(the)f(users)g(authorized)g
1965	(for)h(role)f Ff(i)150 255 y(P)7 b Fg([)p Ff(i)p Fg(])15 b(=)h(the)g
1966	(privileges)f(that)i(are)f(authorized)g(for)h(role)f Ff(i)150
1967	315 y(E)j Fg(=)d(the)g(set)h(of)f(role)g(pairs)h(\()p Ff(i;)8
1968	b(j)s Fg(\))15 b(that)i(are)f(m)o(utually)e(exclusiv)o(e)g(with)i(eac)o(h)g
1969	(other)0 425 y(Access)f(to)i(privileges:)150 486 y Ff(X)t Fg([)p
1970	Ff(s;)8 b(p)p Fg(])16 b(=)g(true)g(if)g(and)h(only)f(if)g(sub)s(ject)f
1971	Ff(s)h Fg(can)h(execute)e(privilege)f Ff(p)150 596 y Fg(The)i(follo)o(wing)g
1972	(in)o(v)m(arian)o(ts)g(m)o(ust)f(b)q(e)h(main)o(tained)f(b)o(y)g(the)h(RBA)o
1973	(C)f(system.)0 656 y(Consisten)o(t)h(sub)s(ject:)21 b(relates)16
1974	b(h)o(uman)f(users)h(to)h(sub)s(jects)f(executing)f(on)i(the)f(users')g(b)q
1975	(ehalf.)150 770 y($)p Fa(8)p Ff(s;)8 b(u;)g(i)p Fg($)p Fa(j)p
1976	Ff(U)d Fg([)p Ff(s)p Fg(])11 b(=)j Ff(u)f Fg(:)h Ff(u)f Fa(2)h
1977	Ff(M)5 b Fg([)p Ff(i)p Fg(])13 b Fa(,)h Ff(i)f Fa(2)h Ff(R)p
1978	Fg([)p Ff(s)p Fg(])897 b($1$)0 934 y(Role)17 b(assignmen)o(t:)23
1979	b(a)c(sub)s(ject)e(can)h(execute)e(a)i(privilege)e(only)h(if)h(the)f(sub)s
1980	(ject)g(has)i(selected)d(or)i(b)q(een)0 994 y(assigned)f(an)g(activ)o(e)e
1981	(role:)150 1108 y($)p Fa(8)p Ff(s;)8 b(p)p Fg($)13 b(:)g
1982	Ff(X)t Fg([)p Ff(s;)8 b(p)p Fg(])14 b Fa(\))f Ff(A)p Fg([)p
1983	Ff(s)p Fg(])g Fa(6)p Fg(=)h Fa(;)1166 b Fg($2$)0 1272 y(Role)16
1984	b(authorization:)22 b(a)16 b(sub)s(ject's)g(activ)o(e)e(role)i(m)o(ust)f(b)q
1985	(e)i(authorized)f(for)g(the)g(sub)s(ject:)150 1386 y(\()p Fa(8)p
1986	Ff(s)p Fg(\))c(:)i Ff(i)f Fa(2)h Ff(A)p Fg([)p Ff(s)p Fg(])f
1987	Fa(\))g Ff(i)h Fa(2)g Ff(R)p Fg([)p Ff(s)p Fg(])1201 b($3$)0
1988	1550 y(Privilege)15 b(authorization:)23 b(a)18 b(sub)s(ject)e(can)h(execute)f
1989	(a)h(privilege)e(only)i(if)f(the)h(privilege)e(is)i(authorized)0
1990	1611 y(for)g(a)f(role)g(in)g(whic)o(h)f(the)h(sub)s(ject)g(is)g(curren)o(tly)
1991	f(activ)o(e:)150 1725 y($)p Fa(8)p Ff(s;)8 b(p)p Fg($\()p
1992	Fa(9)p Ff(i)p Fg(\))k(:)h Ff(X)t Fg([)p Ff(s;)8 b(p)p Fg(])14
1993	b Fa(\))g Ff(i)f Fa(2)h Ff(A)p Fg([)p Ff(s)p Fg(])c Fa(^)h
1994	Ff(p)j Fa(2)h Ff(P)7 b Fg([)p Ff(i)p Fg(])873 b($4$)150 1889
1995	y(With)17 b($2$)h(and)g($3$,)g(this)g(rule)f(guaran)o(tees)h(that)g(a)g
1996	(sub)s(ject)f(can)g(execute)f(a)i(privilege)e(only)i(if)0 1949
1997	y(the)e(privilege)e(is)j(authorized)f(for)g(that)h(activ)o(e)e(role.)0
1998	2059 y(Role)j(Hierarc)o(h)o(y:)k(Roles)c(are)g(organized)h(in)o(to)f(a)g
1999	(partially)f(ordered)h(set)g($p)q(oset$)h(so)g(that)f(if)g(a)h(role)e(is)0
2000	2119 y(included)e(in)h(the)g(authorized)g(or)h(activ)o(e)e(role)h(sets,)f
2001	(roles)i(b)q(elo)o(w)f(it)g(in)f(the)h(p)q(oset)h(are)g(included)e(also:)150
2002	2233 y($)p Fa(8)p Ff(i;)8 b(j;)g(s)p Fg($)k(:)h(\()p Ff(i)h
2003	Fa(2)g Ff(A)p Fg([)p Ff(s)p Fg(])c Fa(^)h Ff(i)i Fa(\027)h
2004	Ff(j)j Fa(\))c Ff(j)k Fa(2)d Ff(A)p Fg([)p Ff(s)p Fg(]\))c
2005	Fa(^)h Fg(\()p Ff(i)j Fa(2)g Ff(R)p Fg([)p Ff(s)p Fg(])c Fa(^)i
2006	Ff(i)h Fa(\027)h Ff(j)j Fa(\))c Ff(j)k Fa(2)d Ff(R)p Fg([)p
2007	Ff(s)p Fg(]\))247 b($5$)951 2828 y(10)p eop
2008	%%Page: 11 11
2009	bop 0 203 a Fh(Separation)27 b(of)h(Dut)n(y)0 313 y Fg(W)l(e)14
2010	b(de\014ne)f(static)h(separation)g(of)g(dut)o(y)g(to)g(mean)f(that)h(roles)g
2011	(whic)o(h)f(ha)o(v)o(e)g(b)q(een)h(sp)q(eci\014ed)f(as)h(m)o(utually)0
2012	373 y(exclusiv)o(e)f(cannot)k(b)q(oth)g(b)q(e)f(included)e(in)i(a)g(user's)g
2013	(set)g(of)g(authorized)f(roles.)21 b(With)16 b(dynamic)e(separa-)0
2014	433 y(tion)j(of)g(dut)o(y)l(,)f(users)h(ma)o(y)f(b)q(e)h(authorized)g(for)g
2015	(t)o(w)o(o)f(roles)h(that)h(are)f(m)o(utually)d(exclusiv)o(e,)g(but)j(cannot)
2016	0 493 y(ha)o(v)o(e)g(b)q(oth)h(roles)f(activ)o(e)g(at)h(the)f(same)f(time.)23
2017	b(In)17 b(other)h(w)o(ords,)g(static)f(separation)h(of)g(dut)o(y)f(enforces)0
2018	554 y(the)j(m)o(utual)f(exclusion)h(rule)g(at)h(the)f(time)e(an)k
2019	(administrator)d(sets)i(up)g(role)f(authorizations,)i(while)0
2020	614 y(dynamic)14 b(separation)j(of)g(dut)o(y)f(enforces)g(the)g(rule)f(at)i
2021	(the)f(time)e(a)j(user)f(selects)f(roles)h(for)h(a)f(session.)0
2022	724 y(Static)g(separation)h(of)f(dut)o(y:)150 838 y(\()p Fa(8)p
2023	Ff(u;)8 b(i;)g(j)s Fg(\))p Fa(j)p Ff(i)j Fa(6)p Fg(=)j Ff(j)j
2024	Fg(:)c Ff(u)h Fa(2)g Ff(M)5 b Fg([)p Ff(i)p Fg(])10 b Fa(^)h
2025	Ff(u)j Fa(2)g Ff(M)5 b Fg([)p Ff(j)s Fg(])13 b Fa(\))h Fg(\()p
2026	Ff(i;)8 b(j)s Fg(\))13 b Fa(62)h Ff(E)696 b Fg($6$)0 1002
2027	y(Dynamic)15 b(separation)i(of)f(dut)o(y:)150 1116 y(\()p Fa(8)p
2028	Ff(u;)8 b(s;)g(i;)g(j)s Fg(\))p Fa(j)p Ff(i)j Fa(6)p Fg(=)j
2029	Ff(j)i Fg(:)e Ff(u)f Fa(2)h Ff(M)5 b Fg([)p Ff(i)p Fg(])11
2030	b Fa(^)g Ff(u)j Fa(2)g Ff(M)5 b Fg([)p Ff(j)s Fg(])13 b Fa(\))h
2031	Ff(i)f Fa(2)h Ff(A)p Fg([)p Ff(s)p Fg(])c Fa(^)h Ff(j)17 b
2032	Fa(2)d Ff(A)p Fg([)p Ff(s)p Fg(])e Fa(\))i Fg(\()p Ff(i;)8
2033	b(j)s Fg(\))13 b Fa(62)h Ff(E)184 b Fg($7$)951 2828 y(11)p
2034	eop
2035	%%Trailer
2036	end
2037	userdict /end-hook known{end-hook}if
2038	%%EOF
2039

Download in other formats:

Original Format