Secured Web Services Based on Extended Usage Control

Shin, Woochul; Yoo, Sang Bong

doi:10.1007/978-3-540-77018-3_65

Cited by 4 publications

(3 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These have gained serious attention and concern because of their potential impacts on security and privacy issues. Because of DRM's potential opportunity for commercial sector; current DRM solutions have been largely driven by commercial entities and are mainly focused on intellectual property rights protection which is based on payment functions [7][8][9]. All these models discussed above have tried to protected information or digital resources in one way or another.…”

Section: Prior Workmentioning

confidence: 99%

The Package Concept for Enforcing Usage Control

Ghann¹,

Wang²,

Zhou³

2013

JIS

View full text Add to dashboard Cite

Access and usage control is a major challenge in information and computer security in a distributed network connected environment. Many models have been proposed such as traditional access control and UCONABC. Though these models have achieved their objectives in some areas, there are some issues both have not dealt with. The issue of what happens to a resource once it has been accessed rightfully. In view of this, this paper comes out with how to control resource usage by a concept known as the package concept. This concept can be implemented both with internet connection and without the internet connection to ensure continual control of resource. It packages the various types of resources with the required policies and obligations that pertain to the use of these different resources. The package concept of ensuring usage control focuses on resource by classifying them into three: Intellectual, sensitive and non-sensitive resources. Also this concept classifies access or right into three as: access to purchase, access to use temporally online and access to modify. The concept also uses biometric mechanism such as fingerprints for authentication to check redistribution of resource and a logic bomb to help ensure the fulfillment of obligations.

show abstract

Section: Prior Workmentioning

confidence: 99%

The Package Concept for Enforcing Usage Control

Ghann¹,

Wang²,

Zhou³

2013

JIS

View full text Add to dashboard Cite

show abstract

“…Behind this classification, the most recent research concerns with attributes delegation and sharing in multidomain, network-connected computer systems [18][19][20][21]. The basic idea of a delegation is that a subject could pass some of its own permissions to others who can carry out some accesses on the behalf of the former.…”

Section: Conceptual Modelmentioning

confidence: 99%

Usage control in computer security: A survey

Lazouski

Martinelli

Mori

2010

Computer Science Review

120

View full text Add to dashboard Cite

“…The term negotiation suggests that multi-step bidirectional communication takes place. Shin and Yoo (2007) extended the usage control (UCON) model by adding a further component, namely delegation, for the effective modeling of delegating access rights in ubiquitous computing.…”

Section: Background On the Usage Control (Ucon)mentioning

confidence: 99%

Adapting usage control as a deterrent to address the inadequacies of access controls

Padayachee

Eloff

2009

Computers & Security

View full text Add to dashboard Cite

a b s t r a c tAccess controls are difficult to implement and evidently deficient under certain conditions. Traditional controls offer no protection for unclassified information, such as a telephone list of employees that is unrestricted, yet available only to members of the company. On the opposing side of the continuum, organizations such as hospitals that manage highly sensitive information require stricter access control measures. Yet, traditional access control may well have inadvertent consequences in such a context. Often, in unpredictable circumstances, users that are denied access could have prevented a calamity had they been allowed access. It has been proposed that controls such as auditing and accountability policies be enforced to deter rather than prevent unauthorized usage. In dynamic environments preconfigured access control policies may change dramatically depending on the context. Moreover, the cost of implementing and maintaining complex preconfigured access control policies sometimes far outweighs the benefits. This paper considers an adaptation of usage control as a proactive means of deterrence control to protect information that cannot be adequately or reasonably protected by access control.

show abstract

Secured Web Services Based on Extended Usage Control

Cited by 4 publications

References 6 publications

The Package Concept for Enforcing Usage Control

The Package Concept for Enforcing Usage Control

Usage control in computer security: A survey

Adapting usage control as a deterrent to address the inadequacies of access controls

Contact Info

Product

Resources

About