In this paper we present a new framework for specifying access control policies in smart spaces called Criticality-Aware Access Control (CAAC). The main idea is to automatically respond to occurrences of critical events within the smart space and change the access control policies accordingly. Current solutions like Context Aware-Role Based Access Control(CARBAC) are not designed to take critical events into account. CAAC extends the CA-RBAC model by including a new parameter called Criticality which measures the urgency of tackling the effects of a critical event. We further identify five basic requirements for handling critical events: Responsiveness, Correctness, Non-interference, Liveness and Non-repudiability. Based on the CAAC framework, we define a sample set of access control policies and validate them to show that they meet the aforementioned requirements.
Sandeep K. S. Gupta, Tridib Mukherjee, Krishna K.