Unified Access Management for Digital Evidence Storage: Integrating Attribute-based and Role-based Access Control with XACML

Abstract

Digital evidence is stored in digital evidence storage. An access control system is crucial in situations where not all users can access digital evidence, ensuring that each user's access is limited to what is essential for them to do their jobs. As a result, access control must be included. Role-based access control (RBAC) and attribute-based access control (ABAC) are two of the several varieties of access control. Only the ABAC model is applied in digital evidence storage systems in the research that has been done. In order to get more precise findings, some academics have suggested combining these two models. In light of this, this study suggests a hybrid paradigm for digital evidence storage that combines the key components of both ABAC and RBAC. In addition to utilizing eXtensible Access Control Markup (XACML) throughout the policy statement creation process. A programming language called XACML uses the XML format to specify RBAC and ABAC rules. The study's findings demonstrate that the ABAC and RBAC models can function in accordance with the developed permit and deny test scenarios.