QACBAC: an owner-centric QoC-aware context-based access control model for pervasive environments

ABSTRACT

In Pervasive Computing Environments (PCE), context information can have a strong impact on application adaptation; not only at application logic level but also security management level. Therefore, from an access control point of view, it is required that the access control models take into account context information such as location and time, in determining whether access should be allowed or not. As context information represents real-world situations, it is associated with certain quality indicators that can influence directly the access control decisions. In this paper, we propose an owner-centric QoC-Aware Context-Based Access Control model (QACBAC) that takes into account both context information and its QoC indicators to grant and to adapt access permissions to resources. We also introduce components and equations to measure the revelant QoC indicators to the access control services/users, that will be used in the QACBAC model. Moreover, a case study is presents showing the definition of access rules using the proposed access control model.

REFERENCES

• 1: Trusted computer system evaluation criteria, dod 5200.28-std, department of defense, 1985.
• 2: Elisa Bertino , Piero Andrea Bonatti , Elena Ferrari, TRBAC: a temporal role-based access control model, Proceedings of the fifth ACM workshop on Role-based access control, p.21-30, July 26-28, 2000, Berlin, Germany [doi>10.1145/344287.344298]
• 3: T. Buchholz, A. Küpper, and M. Schiffers. Quality of context: What it is and why we need it. In (HPOVUA 2003), Geneva, 2003, 2003.
• 4: S. M. Chandran and J. B. D. Joshi. Lot-rbac: A location and time-based rbac model. In A. H. H. Ngu, M. Kitsuregawa, E. J. Neuhold, J.-Y. Chung, and Q. Z. Sheng, editors, WISE, volume 3806 of Lecture Notes in Computer Science, pages 361--375. Springer, 2005.
• 5: Guanling Chen , David Kotz, A Survey of Context-Aware Mobile Computing Research, Dartmouth College, Hanover, NH, 2000
• 6: Anind K. Dey, Understanding and Using Context, Personal and Ubiquitous Computing, v.5 n.1, p.4-7, February 2001 [doi>10.1007/s007790170019]
• 7: Bringel Filho , Windson Viana , Reinaldo Braga , Rossana Andrade, FRAMESEC: A Framework for the Application Development with End-to-End Security Provision in the Mobile Computing Environment, Proceedings of the Advanced Industrial Conference on Telecommunications/Service Assurance with Partial and Intermittent Resources Conference/E-Learning on Telecommunications Workshop, p.72-77, July 17-22, 2005 [doi>10.1109/AICT.2005.45]
• 8: Christin Groba , Stephan Grob , Thomas Springer, Context-Dependent Access Control for Contextual Information, Proceedings of the The Second International Conference on Availability, Reliability and Security, p.155-161, April 10-13, 2007 [doi>10.1109/ARES.2007.61]
• 9: Younghee Kim , Keumsuk Lee, A Quality Measurement Method of Context Information in Ubiquitous Environments, Proceedings of the 2006 International Conference on Hybrid Information Technology, p.576-581, November 09-11, 2006 [doi>10.1109/ICHIT.2006.32]
• 10: Y.-G. Kim, C.-J. Moon, D. Jeong, J.-O. Lee, C.-Y. Song, and D.-K. Baik. Context-aware access control mechanism for ubiquitous applications. In AWIC, volume 3528 of Lecture Notes in Computer Science, pages 236--242. Springer, 2005.
• 11: P. N. MA Razzaque, S Dobson. Categorization and modelling of quality in context information. In Proceedings of the IJCAI 2005, 2005.
• 12: F. A. Mendoza, A. M. López, C. Campo, and R. C. García. Trustac: Trust-based access control for pervasive devices. In SPC 2005, Boppard, Germany, April 6-8, 2005, Proceedings, volume 3450 of Lecture Notes in Computer Science, pages 225--238. Springer, 2005.
• 13: Generalized Role-Based Access Control, Proceedings of the The 21st International Conference on Distributed Computing Systems, p.391, April 16-19, 2001
• 14: S.-H. Park, Y.-J. Han, and T.-M. Chung. Context-role based access control for context-aware application. In HPCC 2006, Munich, Germany, September 13-15, 2006, Proceedings, volume 4208 of Lecture Notes in Computer Science, pages 572--580. Springer, 2006.
• 15: S.-H. Park, Y.-J. Han, and T.-M. Chung. Context-role based access control for context-aware application. In HPCC 2006, Munich, Germany, September 13-15, 2006, Proceedings, volume 4208 of Lecture Notes in Computer Science, pages 572--580. Springer, 2006.
• 16: D. Preuveneers and Y. Berbers. Quality Extensions and Uncertainty Handling for Context Ontologies. In P. Shvaiko, J. Euzenat, A. Léger, D. L. McGuinness, and H. Wache, editors, Proceedings of (C&O 2006), pages 62--64, Riva del Garda, Italy, August 2006.
• 17: I. Ray and M. Toahchoodee. A spatio-temporal role-based access control model. In 21st Annual IFIP WG, Redondo Beach, CA, USA, July 8-11, 2007, Proceedings, volume 4602 of Lecture Notes in Computer Science, pages 211--226. Springer, 2007.
• 18: Ravi S. Sandhu , Edward J. Coyne , Hal L. Feinstein , Charles E. Youman, Role-Based Access Control Models, Computer, v.29 n.2, p.38-47, February 1996 [doi>10.1109/2.485845]
• 19: B. Schilit , N. Adams , R. Want, Context-Aware Computing Applications, Proceedings of the 1994 First Workshop on Mobile Computing Systems and Applications, p.85-90, December 08-09, 1994 [doi>10.1109/WMCSA.1994.16]
• 20: Kamran Sheikh , Maarten Wegdam , Marten van Sinderen, Middleware Support for Quality of Context in Pervasive Context-Aware Systems, Proceedings of the Fifth IEEE International Conference on Pervasive Computing and Communications Workshops, p.461-466, March 19-23, 2007 [doi>10.1109/PERCOMW.2007.81]
• 21: T. Strang and C. L. Popien. A context modeling survey, September 2004.
• 22: Siliang Tang , Jianhua Yang , Zhaohui Wu, A Context Quality Model for Ubiquitous Applications, Proceedings of the 2007 IFIP International Conference on Network and Parallel Computing Workshops, p.282-287, September 18-21, 2007
• 23: W. Viana, J. B. Filho, J. Gensel, M. Villanova-Oliver, and H. Martin. Photomap - automatic spatiotemporal annotation for mobile photos. In W2GIS 2007, Cardiff, UK, November 28-29, 2007. Proceedings, pages 187--201, 2007.
• 24: W. Viana, J. B. Filho, J. Gensel, M. Villanova-Oliver, and H. Martin. A semantic approach and a web tool for contextual annotation of photos using camera phones. In WISE, pages 225--236, 2007.
• 25: Shigetoshi Yokoyama , Eiji Kamioka , Shigeki Yamada, An Anonymous Context Aware Access Control Architecture For Ubiquitous Services, Proceedings of the 7th International Conference on Mobile Data Management, p.74, May 10-12, 2006 [doi>10.1109/MDM.2006.31]
• 26: G. Zhang and M. Parashar. Context-aware dynamic access control for pervasive computing, 2004.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

Additional Classification:
  H. Information Systems
  H.3 INFORMATION STORAGE AND RETRIEVAL
      H.3.4 Systems and Software

General Terms:
Security

Keywords:
access control, context-aware, distributed systems, pervasive computing environment, quality of context