Role Based Access Control with Spatiotemporal Context for Mobile Applications

Aich, Subhendu; Mondal, Samrat; Sural, Shamik; Majumdar, A. K.

doi:10.1007/978-3-642-01004-0_10

Cited by 39 publications

(30 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There are only a few papers targeting at the context-aware RABC (Aich, 2009;Kulkarni, 2008), but they did not describe how to discover or identify contextaware roles. As a result, many works started to study context aware role mining and role based recommendation systems.…”

Section: Related Workmentioning

confidence: 99%

Context aware role updating for IoT service recommendation

Zhu¹,

Jian²

2016

Services Proceedings of the 2016 S2

View full text Add to dashboard Cite

With the rapid development of Internet of Things (IoT) and mobile technologies, the service offerings available in the IoT and mobile environments are increasing dramatically. How to provide more intelligent and personalized services for users becomes a challengingissue. Several context aware service recommendation approaches have been reported to leverage roles to represent common knowledge within user communities, based on which intelligent services can be recommended for users. Prior studies on context aware role miningmainly focus on miningroles from a fixed data set of user behavior patterns, while most of them neglect the dynamic change of the input data. The frequent change of the user data will result in the changing of extracted roles, and how to efficiently update the extracted roles according to the change of the input user data remains a challenging issue. In this paper, towards this issue, we introduce a novel role updating approach of context aware role mining. Experiments show that compared with the algorithm that takes all the updated data as the input, our approach can significantly decrease the update time.

show abstract

Section: Related Workmentioning

confidence: 99%

Context aware role updating for IoT service recommendation

Zhu¹,

Jian²

2016

Services Proceedings of the 2016 S2

View full text Add to dashboard Cite

show abstract

“…There are also spatiotemporal extensions of RBAC that include both temporal and spatial constraints [16,2,6,1]. In STARBAC [2,1], the spatial constraints consider only the containment of a physical location in a set of points (as a logical location) for role enabling and disabling.…”

Section: Related Workmentioning

confidence: 99%

“…In STARBAC [2,1], the spatial constraints consider only the containment of a physical location in a set of points (as a logical location) for role enabling and disabling. LoT-RBAC [16] is another spatiotemporal extension that employs separate spatial containment hierarchy for each physical and logical location in order to incorporate fine-grained spatial constraints into RBAC.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Access control models for geo-social computing systems

Tarameshloo

Fong

2014

Proceedings of the 19th ACM Symposium on Access Control Models and Technologies

View full text Add to dashboard Cite

A Geo-Social Computing System (GSCS) allows users to declare their current locations, and uses these declared locations to make authorization decisions. Recent years have seen the emergence of a new generation of social computing systems that are GSCSs.This paper proposes a protection model for GSCSs. The protection system tracks the current locations of users and a knowledge base of primitive spatial relations between locations. Access control policies can be formulated by the composition of primitive spatial relations. The model is extended to account for Geo-Social Network Systems (GSNSs), which track both a spatial knowledge base and a social network. A policy language for GSNSs is proposed for specifying policies that combine both social and spatial constraints.

show abstract

“…Several models have been proposed [1,2,5] that extend RBAC to allow the specification of policies in which the access decision is determined by the spatio-temporal context of subjects and objects. However, these models relate the role extents to fixed locations, restricting the policies to static zones.…”

Section: Introductionmentioning

confidence: 99%

Towards location-based access control in healthcare emergency response

Vicente

Kirkpatrick

Ghinita

et al. 2009

Proceedings of the 2nd SIGSPATIAL ACM GIS 2009 International Workshop on Security and Privacy in GIS and LBS

View full text Add to dashboard Cite

Recent advances in positioning and tracking technologies have led to the emergence of novel location-based applications that allow participants to access information relevant to their spatio-temporal context. Traditional access control models, such as role-based access control (RBAC), are not sufficient to address the new challenges introduced by these location-based applications. Several recent research efforts have enhanced RBAC with spatio-temporal features. Nevertheless, the state-of-the-art does not deal with mobility of both subjects and objects and does not support the utilization of complex access control decisions based on spatio-temporal relationships among subjects and objects. Furthermore, such relationships change frequently in dynamic environments, requiring efficient mechanisms to monitor and re-evaluate access control decisions. In this position paper, we present a healthcare emergency response scenario which highlights the novel challenges that arise when enforcing access control in an environment with moving subjects and objects. To address a realistic application scenario, we consider movement on road networks, and we identify complex access control decisions relevant to such settings. We overview the main technical issues to be addressed, and we describe the architecture for policy decision and enforcement points.

show abstract

Role Based Access Control with Spatiotemporal Context for Mobile Applications

Cited by 39 publications

References 16 publications

Context aware role updating for IoT service recommendation

Context aware role updating for IoT service recommendation

Access control models for geo-social computing systems

Towards location-based access control in healthcare emergency response

Contact Info

Product

Resources

About