An Access Control Model for Ubiquitous Computing Application

Abstract

Traditional computer system depends on access policy and user's identities to grant or deny their access to resources. The basic assumption in this system is the entities had been known. It is unsuitable to use identitybased access control in ubiquitous computing environment where entities are not foreknown to each other. In this paper, we present a trust based access control model to secure ubiquitous computing application. The resourceconstrained trust negotiation is addressed to establish initial trust for authenticating strangers. By the initial trust, each user is arranged a role subset, and context information dynamic decides which role is active.

Blacklisting and Forgiving Coarse-grained Access Control for Cloud Computing

“…They define trust as the level of confidence associated with a user based on certain certified attributes. Jameel et al [21] provides a trust model based on the vectors of trust values of different entities. The trust evaluation depends only on the recommendation of peer common entities to the interacting entities.…”

A Model for Trust-Based Access Control and Delegation in Mobile Clouds

“…Unfortunately, these models do not allow access control decisions to be dynamically updated or revoked based on the history of the requester, or based on changing requirements of the requester. Recently, researchers have proposed the notion of risk-adaptable access control models [9,14,13] and trust-based access control models [7,4,23] to facilitate dynamic adaptation of access control policies based on operational needs and situational awareness. A recent work [1] combines these two philosophies into one comprehensive model.…”

Modeling interaction using trust and recommendation in ubiquitous computing environment

“…Centaurus depends heavily on the delegation of trust to third party. Recent research trend [4][5][6][7][8][9][10][11][12][13][17][18][19][20][21][22][23][24][25][26][27][28] is to build autonomous trust management as fundamental building block to design future security framework. SECURE project [4,5] presents a formal trust and risk framework to secure collaboration between ubiquitous computer systems.…”

“…They used expected value, entropy and hyper entropy to define a trust cloud representing trust relationship. Ya-Jun et al [8] have presented a trust-based access control model that relies on trust negotiation to establish initial trust for authenticating strangers. It is an extension of the role based access control thus suffers with its inherent issues.…”

“…It is a human cognitive function that spurs social interactions. Recently, many researchers are working to imitate the way human assess trust, as a channel for socializing into our new security concepts for ubiquitous computing [4][5][6][7][8][9][10][11][12][13]. There emphasizes is on the computational capabilities, with less concern for systematically designed trust infrastructure resulting in ambiguous requirements for access control in ubiquitous environment.…”