STARBAC: spatiotemporal role based access control

  • Authors:
  • Subhendu Aich;Shamik Sural;A. K. Majumdar

  • Affiliations:
  • School of Information Technology, Indian Institute of Technology, Kharagpur, India;School of Information Technology, Indian Institute of Technology, Kharagpur, India;Department of Computer Science & Engineering, Indian Institute of Technology, Kharagpur, India

  • Venue:
  • OTM'07 Proceedings of the 2007 OTM confederated international conference on On the move to meaningful internet systems: CoopIS, DOA, ODBASE, GADA, and IS - Volume Part II
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Role Based Access Control (RBAC) has emerged as an important access control paradigm in computer security. However, the access decisions that can be taken in a system implementing RBAC do not include many relevant factors like user location, system location, system time, etc. We propose a spatiotemporal RBAC Model (STARBAC) which reasons in spatial and temporal domain in tandem. STARBAC control command enables or disables role based on spatiotemporal conditions. The new model is able to specify a number of different types of important access requirements not expressible in existing variations of RBAC model like GEORBAC and TRBAC. The specification language we present here is powerful enough to allow logical connectives like AND (∧) and OR (∨) over spatiotemporal conditions.