A Contextual Access Control Model

Abstract

The proposed access control model is based on description logic (DL) augmented with a default (δ) and an exception ( ) operators to capture context feature. Our model is inspired from OrBAC model and has an expressivity almost comparable to it, which means assigning authorization to a user according to its role in an organization in a given context. The most important difference of our model is the allow of composed context, the add of new context and the deduction of new authorization depending on context.