Failure Feedback for User Obligation Systems

In recent years, several researchers have proposed techniques for providing users with assistance in understanding and overcoming authorization denials. The incorporation of environmental factors into authorization decisions has made this particularly important and challenging. An environmental factor that has not previously been considered in this effort to provide such assistance to users arises in systems where obligations can depend on and affect authorizations. In these systems, it is desirable to ensure that users will have the authorizations they require to fulfill their obligations, and prior work has proposed denying requests to perform non-obligatory actions that would cause this property to become violated, whether the violation is a direct result of the requested action or due to obligations that would be incurred as a result of it. Because of privacy concerns, as well as the intricate interactions between actions and pending obligations, the current work focuses on helpin...

• Type: Journal
• Year: 2010
• Where: SOCIALCOM
• Authors: Murillo Pontual, Keith Irwin, Omar Chowdhury, William H. Winsborough, Ting Yu
• Keywords: Authorization Denials, Environmental Factor, Protection General Terms, Security Privacy, SOCIALCOM 2010