Time and Location Based Services with Access Control

—We propose an access control model that extends RBAC (Role-Based Access Control) to take time and location into account, and use term rewriting systems to specify access control policies in this model. We discuss implementation techniques for rewrite-based policy specifications, and the integration of these policies in web applications. The declarative nature of the model facilitates the analysis of policies and the evaluation of access requests: we present two case-studies.

• Type: Conference
• Year: 2008
• Where: NTMS
• Authors: Clara Bertolissi, Maribel Fernández
• Keywords: Access Control, Access Control Model, Emerging Technology, NTMS 2008, Role-based Access Control