Conviviality-driven access control policy

Abstract

Nowadays many organizations experience security incidents due to unauthorized access to information. To reduce the risk of such incidents, security policies are often employed to regulate access to information. Such policies, however, are often too restrictive, and users do not have the rights necessary to perform assigned duties. As a consequence, access control mechanisms are perceived by users as a barrier and thus bypassed, making the system insecure. In this paper we draw a bridge between the social concept of conviviality and access control. Conviviality has been introduced as a social science concept for ambient intelligence and multi-agent systems to highlight soft qualitative requirements like user-friendliness of systems. To bridge the gap between conviviality and security, we propose a methodological framework for updating and adapting access control policies based on conviviality recommendations. Our methodology integrates and extends existing techniques to assist system designers in the derivation of access control policies from socio-technical requirements of the system, while taking into account the conviviality of the system. We illustrate our framework using the Ambient Assisted Living (AAL) use case from the HotCity of Luxembourg.

Privacy challenges in Ambient Intelligence systems

“…There must be a tradeoff between how much privacy the system allows, and how cooperative and convivial the system can be [131]. On the one hand, the more private the AAL system is, the less opportunities it offers to its users to cooperate and exchange information with each other, and the less convivial it is for users [132,133].…”

Collaborative Explanation and Response in Assisted Living Environments Enhanced with Humanoid Robots

“…Approaches such as Role-Based Access Control or Attribute-Based Access Control could be used, e.g. (Kateb et al, 2014). The latter method offers the interesting perspective whereby a subject's requests to perform operations on objects are granted or denied based on the attributes of the subject, the object and the environment.…”