Context-sensitive authorization in interaction patterns

Abstract

Main requirement of recent computing environments, like mobile and then ubiquitous computing, is to adapt applications to context. On the other hand, access control generally trust users once they have authenticated, despite the fact that they may reach unauthorized situations. We analyse how dynamic information can be used to improve security in the authorization process, and what are the implications when applied to interaction patterns. We experiment and validate our approach using context as an authorization factor for eventing in Web service for device (like UPnP or DPWS).

Benefits of Location-Based Access Control: A Literature Study

“…Pervasive or ubiquitous systems, that use sensors, wireless transmissions and/or movable devices, differ from normal systems in their access control requirements. User actions should affect access control on objects [37] and because the actions are determined by specific locations, this provides a motivation for LBAC.…”