Mobile Security with Location-Aware Role-Based Access Control

Ulltveit-Moe, Nils; Oleshchuk, Vladimir

doi:10.1007/978-3-642-30244-2_15

Cited by 6 publications

(2 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It would in this case be natural to use the XACML Role-Based Access Control (RBAC) prole 7 for deploying role keys. Such a solution can be integrated with the proposed solution in a similar way as discussed in [24]. The details of this is however left as future work.…”

Section: Deanonymiser Performancementioning

confidence: 99%

A novel policy-driven reversible anonymisation scheme for XML-based services

Ulltveit-Moe

Oleshchuk

2015

Information Systems

Self Cite

View full text Add to dashboard Cite

This paper proposes a reversible anonymisation scheme for XML messages that supports ne-grained enforcement of XACML-based privacy policies. Reversible anonymisation means that information in XML messages is anonymised, however the information required to reverse the anonymisation is cryptographically protected in the messages. The policy can control access down to octet ranges of individual elements or attributes in XML messages. The reversible anonymisation protocol eectively implements a multi-level privacy and security based approach, so that only authoried stakeholders can disclose condential information up to the privacy or security level they are authorised for. The approach furthermore supports a shared secret based scheme, where stakeholders need to agree to disclose condential information. Last, it supports time limited access to private or condential information. This opens up for improved control of access to private or condential information in XML messages used by a service oriented architecture. The solution provides horizontally scalable condentiality protection for certain types of big data applications, like XML databases, secure logging and data retention repositories.

show abstract

Section: Deanonymiser Performancementioning

confidence: 99%

A novel policy-driven reversible anonymisation scheme for XML-based services

Ulltveit-Moe

Oleshchuk

2015

Information Systems

Self Cite

View full text Add to dashboard Cite

show abstract

“…This paper describes how location‐aware RBAC can be implemented by combining GeoXACML and the RBAC profile of XACML. It is an extended version of the original ideas presented at MOBISEC 2011 , where the ideas about a GeoXACML‐based RBAC solution has been implemented, verified and tested. The implementation has also given some new ideas, amongst others about efficient decision caching protocols for location‐aware authorisations.…”

Section: Related Workmentioning

confidence: 99%

Enforcing mobile security with location-aware role-based access control

Ulltveit-Moe

Oleshchuk

2013

Security Comm. Networks

Self Cite

View full text Add to dashboard Cite

This paper describes how location-aware role-based access control (RBAC) can be implemented on top of the Geospatial eXtensible Access Control Markup Language (GeoXACML). It furthermore sketches how spatial separation of duty constraints (both static and dynamic) can be implemented using GeoXACML on top of the XACML RBAC profile. The solution uses physical addressing of geographical locations, which facilitates easy deployment of authorisation profiles to the mobile device. Location-aware RBAC can be used to implement location-dependent access control and also other security enhancing solutions on mobile devices, such as location-dependent device locking, firewall, intrusion prevention or payment anti-fraud systems. The system has been implemented and tested, both to verify the server capacity and also the client capacity running on a mobile device.

show abstract