A generic framework for context-based distributed authorizations

  • Authors:
  • Ghita Kouadri Mostéfaoui;Patrick Brézillon

  • Affiliations:
  • Department of Informatics, University of Fribourg, Fribourg, Switzerland;LIP6, Université, Paris, France

  • Venue:
  • CONTEXT'03 Proceedings of the 4th international and interdisciplinary conference on Modeling and using context
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

In conventional security systems, protected resources such as documents, hardware devices and software applications follow an On/Off access policy. On, allows to grant access and off for denying access. This access policy is principally based on the user's identity and is static over time. As applications become more pervasive, security policies must become more flexible in order to respond to these highly dynamic computing environments. That is, security infrastructures will need to be sensitive to context. In order to meet these requirements, we propose a conceptual model for context-based authorizations tuning. This model offers a fine-grained control over access on protected resources, based on a set of user's and environment state and information.