A Formal Model of Access Control for Mobile Interactive Devices

Abstract. This paper presents an access control model for programming applications in which the access control to resources can employ user interaction to obtain the necessary permissions. This model is inspired by and improves on the Java MIDP security architecture used in Java-enabled mobile telephones. We consider access control permissions with multiplicities in order to allow to use a permission a certain number of times. An operational semantics of the model and a formal definition of what it means for an application to respect the security model is given. A static analysis which enforces the security model is defined and proved correct. A constraint solving algorithm implementing the analysis is presented.

• Type: Conference
• Year: 2006
• Where: ESORICS
• Authors: Frédéric Besson, Guillaume Dufay, Thomas P. Jensen
• Keywords: Access Control, Access Control Model, ESORICS 2006, Model, Security Privacy