An access control model for mobile physical objects

Access to distributed databases containing tuples collected about mobile physical objects requires information about the objects’ trajectories. Existing access control models cannot encode this information efficiently. This poses a policy management problem to administrators in real-world supply chains where companies want to protect their goods tracking data. In this paper we propose a new access control model as an extension to attribute-based access control that allows trajectory-based visibility policies. We prove the security properties of our novel authentication protocol for distributed systems that can supply the decision algorithm with the necessary reliable information using only standard passive RFID tags. As a result companies will be able to improve confidentiality protection and governance of their object tracking data and more trustingly engage in data sharing agreements. Categories and Subject Descriptors D.4.6 [Operating Systems]: Security and Protection— Access ...

• Type: Conference
• Year: 2010
• Where: SACMAT
• Authors: Florian Kerschbaum
• Keywords: Access Control, Access Control Model, Attribute-based Access Control, Control Systems, SACMAT 2010