A Use-Based Approach for Enhancing UCON

Grompanopoulos, Christos; Gouglidis, Antonios; Mavridis, Ioannis

doi:10.1007/978-3-642-38004-4_6

Cited by 5 publications

(9 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The UseCON model [7,10] is a next-generation model based on the concept usage control. UseCON is able to support complex and more expressive policies com-pared to existing usage-based approaches (e.g., UCON).…”

Section: Access Control In Iiotmentioning

confidence: 99%

Access Control in the Industrial Internet of Things

Salonikias

Gouglidis

Mavridis

et al. 2019

Security and Privacy Trends in the Industrial Internet of Things

Self Cite

View full text Add to dashboard Cite

The Industrial Internet of Things (IIoT) is an ecosystem that consists of -among others --various networked sensors and actuators, achieving mainly advancements related with lowering production costs and providing workflow flexibility. Introducing access control in such environments is considered to be challenging, mainly due to the variety of technologies and protocols in IIoT devices and networks. Thus, various access control models and mechanisms should be examined, as well as the additional access control requirements posed by these industrial environments. To achieve these aims, we elaborate on existing state-of-the-art access control models and architectures and investigate access control requirements in IIoT, respectively. These steps provide valuable indications on what type of an access control model and architecture may be beneficial for application in the IIoT. We describe an access control architecture capable of achieving access control in IIoT using a layered approach and based on existing virtualization concepts (e.g., the cloud). Furthermore, we provide information on the functionality of the individual access control related components, as well as where these should be placed in the overall architecture. Considering this research area to be challenging, we finally discuss open issues and anticipate these directions to provide interesting multi-disciplinary insights in both industry and academia.

show abstract

Section: Access Control In Iiotmentioning

confidence: 99%

Access Control in the Industrial Internet of Things

Salonikias

Gouglidis

Mavridis

et al. 2019

Security and Privacy Trends in the Industrial Internet of Things

Self Cite

View full text Add to dashboard Cite

show abstract

“…UseCON is a usage control model that is characterised by extended expressiveness when compared with existing usage-based models (e.g., UCON [11]). Specifically, it may support authorisations that have logical relations between entities (see direct and indirect entities in [3]), as well as historical information, and can express complicated requests between subjects and objects through simple policies (see automated management of use entities in [3]). In the following, we provide a formal specification of the UseCON model in TLA+ (see TLA+ specification in [1]).…”

Section: Specification Of Usecon In Tla+mentioning

confidence: 99%

“…New computing paradigms, e.g., the cloud [2], require further investigation of access control systems. This eventually introduces the need for models, such as usage control [3], to cope with complex highlevel requirements set by new computing paradigms.Usage control models provide an integration of access control, digital rights, and trust management, which may be applicable in environments such as the cloud. To achieve this integration, usage control models support additional concepts such as attribute mutability and continuity of decision.…”

Section: Introductionmentioning

confidence: 99%

“…As discussed in [10], a number of usage control formal models are limited to the specification of a single use, which is isolated and has no interference with other uses. UseCON [3] is a usage model that provides enhanced expressiveness compared to existing access/usage control models and applicable in new computing paradigms [3]. This is achieved by introducing a new entity entitled use, which enables the use of historical information in usage control decision.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Formal Verification of Usage Control Models: A Case Study of UseCON Using TLA+

Gouglidis

Grompanopoulos

Mavridou

2018

Electron. Proc. Theor. Comput. Sci.

Self Cite

View full text Add to dashboard Cite

Usage control models provide an integration of access control, digital rights, and trust management. To achieve this integration, usage control models support additional concepts such as attribute mutability and continuity of decision. However, these concepts may introduce an additional level of complexity to the underlying model, rendering its definition a cumbersome and prone to errors process. Applying a formal verification technique allows for a rigorous analysis of the interactions amongst the components, and thus for formal guarantees in respect of the correctness of a model. In this paper, we elaborate on a case study, where we express the high-level functional model of the UseCON usage control model in the TLA+ formal specification language, and verify its correctness for ≤ 12 uses in both of its supporting authorisation models.

show abstract

“…Contrary to U CON ABC which only manages direct relationships [54], the SoN eU CON ABC access control model extends the U CON ABC model by including a new independent entity, relationships (RT ), and its attributes, relationships attributes (AT T (RT )). The new entity, RT , is composed of the sets of relationships (direct and indirect as described below) between pairs of users.…”

Section: Formalization Of Soneucon Abcmentioning

confidence: 99%