A Generic Framework for Context-Based Distributed Authorizations

In conventional security systems, protected resources such as documents, hardware devices and software applications follow an On/Off access policy. On, allows to grant access and off for denying access. This access policy is principally based on the user’s identity and is static over time. As applications become more pervasive, security policies must become more flexible in order to respond to these highly dynamic computing environments. That is, security infrastructures will need to be sensitive to context. In order to meet these requirements, we propose a conceptual model for context-based authorizations tuning. This model offers a fine-grained control over access on protected resources, based on a set of user’s and environment state and information.

• Type: Conference
• Year: 2003
• Where: CONTEXT
• Authors: Ghita Kouadri Mostéfaoui, Patrick Brézillon
• Keywords: Access Policy, CONTEXT 2003, Conventional Security Systems, On/Off Access Policy