Enforcing spatial constraints for mobile RBAC systems

Abstract

Proposed models for spatially-aware extensions of role-based access control (RBAC) combine the administrative and secu rity advantages of RBAC with the dynamic nature of mobile and pervasive computing systems. However, implementing systems that enforce these models poses a number of chal lenges. As a solution, we propose an architecture for design ing such a system. The architecture is based on an enhanced RBAC model that supports location-based access control policies by incorporating spatial constraints.Enforcing spatially-aware RBAC policies in a mobile en vironment requires addressing several challenges. First, one must guarantee the integrity of a user's location during an access request. We adopt a proximity-based solution using Near-Field Communication (NFC) technology. The next challenge is to verify the user's position continuously satis fies the location constraints. To capture these policy restric tions, we incorporate elements of the UCONABC usage con trol model in our architecture.In this work, we also propose a number of protocols, describe our prototype implementa tion, report the performance of our prototype, and evaluate the security guarantees.

Mobile Security with Location-Aware Role-Based Access Control

“…Using near-field communications (e.g. RFID) together with a proof-of-location protocol is a promising technology that can be used as an additions means to verify known locations [12]. This can improve the precision of location-aware RBAC and also reduce the risk of harming legal businesses.…”

“…A model for enforcing spatial constraints for mobile RBAC systems based on GEO-RBAC is described in [12]. Roles in GEO-RBAC are enabled based on the position of the user.…”

Robust access control framework for mobile cloud computing network

“…Mobile RBAC system which enforces spatially-aware (location) RBAC policies is proposed in [6]. In [6], an object is equipped with a near field communication (NFC) receiver and the user has an NFC enabled handset.…”

“…In [6], an object is equipped with a near field communication (NFC) receiver and the user has an NFC enabled handset. Thus, the users can access certain resources by exchanging credentials using NFC protocols.…”

“…Traditionally, we assume that data owners, users, and storage server are in the same domain and also that the server is fully trusted [1,2,3,4,5,6,7,8,9]. However, in BYOD, cloud computing and outsourcing environments, data confidentiality is not guaranteed since the data is stored and processed within the third party environment.…”