On the Formal Analysis of a Spatio-temporal Role-Based Access Control Model

With the growing use of wireless networks and mobile devices, we are moving towards an era where spatial and temporal information will be necessary for access control. The use of such information can be used for enhancing the security of an application, and it can also be exploited to launch attacks. For critical applications, a model for spatio-temporal-based access control is needed that increases the security of the application and ensures that the location information cannot be exploited to cause harm. Consequently, researchers have proposed various spatio-temporal access control models that are useful in pervasive computing applications. Such models typically have numerous different features to support the various application requirements. The different features of a spatiotemporal access control model may interact in subtle ways resulting in conflicts. We illustrate how the access control model can be formally analyzed to detect the presence of conflicts. We use Alloy, a formal l...

• Type: Conference
• Year: 2008
• Where: DBSEC
• Authors: Manachai Toahchoodee, Indrakshi Ray
• Keywords: Access Control, Access Control Model, Database, DBSEC 2008, Spatio-temporal Access Control