Risk aware Access Control model for Trust Based collaborative organizations in cloud

Secure interactions between collaborative organizations having their applications and data stored in “Cloud Computing” are a critical issue. Access control is the biggest challenge and trust is regarded as an essential secured relationship within a distributed system. Basic access control models, like Discretionary Access Control, Mandatory Access Control, and Role Based Access Control, cannot satisfy requirements in such environment, and need some improvements. During the collaboration, the attitude of the user may change. Therefore, in this context, adding trust management to an access control model is mandatory. To achieve this goal, in this paper, a new trust model to control access in the cloud is proposed. The aim is to monitor in real-time security for collaborative organizations, having decided to migrate to the cloud.

Download Full-text

Evolution of access control models for protection of patient details: a survey

International Journal of Engineering & Technology ◽

10.14419/ijet.v7i2.8.10520 ◽

2018 ◽

Vol 7 (2.8) ◽

pp. 554

Author(s):

Geetanjali Sinha ◽

Prabhu Shankar K.C ◽

Shaurya Jain

Keyword(s):

Access Control ◽

Control Model ◽

Role Based Access Control ◽

Patient Privacy ◽

Access Control Model ◽

Access Control Models ◽

Control Models ◽

Role Hierarchy ◽

Role Based ◽

Electronic Hospital

Hospitals across the world are adapting to Electronic Hospital Information Systems and are moving away from the manual paper systems to provide patients efficient services. Numerous Access ControlModels have been deployed for securing patient privacy one of them being Role Based Access Control Model (RBAC). The current models merely allow access on the basis of roles and role hierarchy without actually understanding the real intention of the person accessing the system. This could lead to a compromise of patient privacy and thus new methods have been evolving. In this survey we will see an evolution of the access control models which lead to the discovery of KC-RBAC (Knowledge Constrained Role Based Access Control) Model which takes into consideration the knowledge related to the medical domain along with the role to provide authorization.

Download Full-text

Research of Access Control Models in Personal Networks

Advanced Materials Research ◽

10.4028/www.scientific.net/amr.989-994.4751 ◽

2014 ◽

Vol 989-994 ◽

pp. 4751-4754

Author(s):

Yu Lan Zhao ◽

Chun Feng Jiang

Keyword(s):

Access Control ◽

Control Model ◽

Personal Networks ◽

Role Based Access Control ◽

Access Control Model ◽

Access Control Models ◽

Control Models ◽

System Resources ◽

Role Based

How to prevent illegal users from sharing system resources was one of the main purposes for MAGNET Security Group. This paper introduced some major access control models such as traditional access control models, role-based access control model (RBAC), task-based access control model (TBAC) and role-task-based access control model (T-RBAC). In the end, a feasible scheme PN_T-RBAC was proposed at the base of the T-RBAC model in existence, which was suitable for the coalition environment of personal networks.

Download Full-text

On the representation of role-based access control models by object-oriented HRU model: taxonomic leaf-based hierarchy case

Mathematical Structures and Modeling ◽

10.24147/2222-8772.2020.4.126-135 ◽

2020 ◽

pp. 126-135

Author(s):

S. V. Usov

Keyword(s):

Access Control ◽

Object Oriented ◽

Control Policy ◽

Control Model ◽

Role Based Access Control ◽

Access Control Model ◽

Access Control Models ◽

Control Models ◽

Security Models ◽

Role Based

In this paper the possibility of representing of some types of role-based access control models by object-oriented discretionary access control model is considered. The role-based security models with taxonomic hierarchy are considered. The permissions of the role-based access control model are represented as a set of pairs of object and access right. A hierarchy of classes of the object-oriented HRU model, based on the role-based access control policy, is constructed. Commands of the object-oriented HRU model, corresponding to the reassignment of roles in the original role-based model, are described.

Download Full-text

Access Control Models

Cyber Warfare and Cyber Terrorism ◽

10.4018/978-1-59140-991-5.ch037 ◽

2011 ◽

pp. 318-326

Author(s):

Romuald Thion

Keyword(s):

Access Control ◽

Computer Systems ◽

Control Model ◽

Role Based Access Control ◽

Security Mechanism ◽

Access Control Model ◽

Access Control Models ◽

Control Models ◽

Role Based

Access control, or authorization, is arguably the most fundamental and most pervasive security mechanism in use today in computer systems. In computer systems, to grant authorization is to determine whether a subject can access resources. Informally speaking it is to decide “who can do what.” Access control is critical to enforce confidentiality (only authorized users can read information) and integrity (only authorized users can alter information) in computer systems, preventing hackers and cyber-terrorists from reading and modifying sensitive files. Several access control models have been proposed since 1960 up today: from simple access matrix to task based access control through military models. Each one providing a different way to organize and express users’ privileges. For example, the role based access control model aggregate privileges thanks to the concept of role: all users receive permissions only through the roles to which they are assigned. We first introduce the purpose of access control, then we describe models in use today, their specificities and the mechanisms which they rely on. The end of the this chapter is dedicated to current issues on access control.

Download Full-text