Towards Differentiated Utilization of Attribute Mutability for Access Control in Ubiquitous Computing

Abstract

The operational characteristics of ubiquitous computing environments (UbiCom) generate new access control requirements which existing classical access control models fail to support efficiently. However, the Usage Control (UCON) family of models introduces components and mechanisms that seem to be able to partially match the specific requirements imposed by UbiCom environments. In this paper, an evaluation of current access control models based on a brief study of UbiCom access control requirements is presented. Then, a new access control approach that extends UCON towards a differentiated utilization of attribute mutability for easiness of administration, better performance and lower operational cost in UbiCom environments is proposed.

Towards Use-Based Usage Control

“…the identity, to alwayschanging attributes, e.g. time [1]. In order to support complicated operations of modern computing systems, it is required for actions to be associated also with attributes.…”

“…Despite Usage CONtrol's (UCON) [3] virtues, supporting complex usage scenarios of modern computing environments is a challenging procedure [4,1]. Such a complexity usually results in involving a large number of entities and in utilizing multi party contextual information during the decision making process of a particular usage.…”

Specification and verification of an attribute-based usage control approach for open and dynamic computing environments

“…The following access control requirements have been resulted from an analysis of the ODCE characteristics through the application of different scenarios as presented in (Damiani et al, 2005;Grompanopoulos and Mavridis, 2010;Thomas and Sandhu, 2004).…”

“…This work has appeared in varying forms of conferences (see appendix B). Particularly, a set of new access control requirements were examined in (Grompanopoulos and Mavridis, 2010). Our proposed usage control model and critiques on existing approaches were presented in (Grompanopoulos and Mavridis, 2012a,b;Grompanopoulos et al, 2013).…”