A role-based access control model for information mediation

Credential Based Mediator Architecture for Access Control and Data Integration in Multiple Data Sources Environment

“…Traditional access control methods like identity based or role based access control are found inadequate to reflect the dynamic mediator environment and the flexible access control requirements [3,5,12,14,21] of multiple data sources. Also, they are more suitable in closed administrative domain where data is accessed by users already known to the system.…”

“…The mediation system not only enables the sharing and integration of data stored across multiple data sources but also ensures its security against unauthorized access [1,2,3,5,12]. Considerable research efforts have been made to handle the issues related to access control in a mediated environment [3,4,6,7,11,12,17].…”

“…Considerable research efforts have been made to handle the issues related to access control in a mediated environment [3,4,6,7,11,12,17]. A traditional approach to enforce security in an integrated system is to have centralized access control in the form of Security Mediators [3,6,12,17] where the administrator or the security officer focuses on the global behaviour of the system and writes access policies.…”

“…Mediation techniques have been developed for data integration that provide a single unified view of the multiple data sources to the user [1,2,3,4,5,6,7,18] …”

“…The access decision depends on the properties the user possesses and can prove by submitting one or more credentials. For data integration, mediator architecture has been recognized as the most commonly used approach for integration of data from heterogeneous data sources [1,2,3,4,5,6,7]. The mediator presents a virtual integrated view of the data sources to the user by mapping the data models of the various sources onto the exchange model of the system.…”