NDLI: A formal model for access control with supporting spatial context

Content Provider	Springer Nature Link
Author	Zhang, Hong He, YePing Shi, ZhiGuo
Copyright Year	2007
Abstract	There is an emerging recognition of the importance of utilizing contextual information in authorization decisions. Controlling access to resources in the field of wireless and mobile networking require the definition of a formal model for access control with supporting spatial context. However, traditional RBAC model does not specify these spatial requirements. In this paper, we extend the existing RBAC model and propose the SC-RBAC model that utilizes spatial and location-based information in security policy definitions. The concept of spatial role is presented, and the role is assigned a logical location domain to specify the spatial boundary. Roles are activated based on the current physical position of the user which obtained from a specific mobile terminal. We then extend SC-RBAC to deal with hierarchies, modeling permission, user and activation inheritance, and prove that the hierarchical spatial roles are capable of constructing a lattice which is a means for articulate multi-level security policy and more suitable to control the information flow security for safety-critical location-aware information systems. Next, constrained SC-RBAC allows express various spatial separations of duty constraints, location-based cardinality and temporal constraints for specify fine-grained spatial semantics that are typical in location-aware systems. Finally, we introduce 9 invariants for the constrained SC-RBAC and its basic security theorem is proven. The constrained SC-RBAC provides the foundation for applications in need of the constrained spatial context aware access control.
Starting Page	419
Ending Page	439
Page Count	21
File Format	PDF
ISSN	10092757
Journal	Science in China Series : Information Sciences
Volume Number	50
Issue Number	3
e-ISSN	18622836
Language	English
Publisher	Science in China Press
Publisher Date	2007-01-01
Publisher Place	Beijing
Access Restriction	Subscribed
Subject Keyword	information security RBAC spatial context lattice MLS constraints formal model Information Systems and Communication Service
Content Type	Text
Resource Type	Article
Subject	Computer Science

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A formal proximity model for RBAC systems

SARBAC07: A Scoped Administration Model for RBAC with Hybrid Hierarchy

A new formal model for privilege control with supporting POSIX capability mechanism

A Role and Context Based Access Control Model with UML

X-STROWL: A generalized extension of XACML for context-aware spatio-temporal RBAC model with OWL

A Context Based Dynamic Access Control Model for Web Service

A Formal Comparison of the Bell & LaPadula and RBAC Models

CT-RBAC: A Temporal RBAC Model with Conditional Periodic Time

Exception Resolution Service for RBAC systems

A formal model for access control with supporting spatial context

Similar Documents

A formal proximity model for RBAC systems

SARBAC07: A Scoped Administration Model for RBAC with Hybrid Hierarchy

A new formal model for privilege control with supporting POSIX capability mechanism

A Role and Context Based Access Control Model with UML

X-STROWL: A generalized extension of XACML for context-aware spatio-temporal RBAC model with OWL

A Context Based Dynamic Access Control Model for Web Service

A Formal Comparison of the Bell & LaPadula and RBAC Models

CT-RBAC: A Temporal RBAC Model with Conditional Periodic Time

Exception Resolution Service for RBAC systems

A formal model for access control with supporting spatial context