An Efficient Attribute-Based Access Control (ABAC) Policy Retrieval Method Based on Attribute and Value Levels in Multimedia Networks

Internet of Multimedia Things (IoMT) brings convenient and intelligent services while also bringing huge challenges to multimedia data security and privacy. Access control is used to protect the confidentiality and integrity of restricted resources. Attribute-Based Access Control (ABAC) implements fine-grained control of resources in an open heterogeneous IoMT environment. However, due to numerous users and policies in ABAC, access control policy evaluation is inefficient, which affects the quality of multimedia application services in the Internet of Things (IoT). This paper proposed an efficient policy retrieval method to improve the performance of access control policy evaluation in multimedia networks. First, retrieve policies that satisfy the request at the attribute level by computing based on the binary identifier. Then, at the attribute value level, the depth index was introduced to reconstruct the policy decision tree, thereby improving policy retrieval efficiency. This study carried out simulation experiments in terms of the different number of policies and different policy complexity situation. The results showed that the proposed method was three to five times more efficient in access control policy evaluation and had stronger scalability.

Download Full-text

Negotiation Based Framework for Attribute-Based Access Control Policy Evaluation

Proceedings of the 7th International Conference on Security of Information and Networks - SIN '14 ◽

10.1145/2659651.2659667 ◽

2014 ◽

Author(s):

Edward Caprin ◽

Yan Zhang

Keyword(s):

Access Control ◽

Policy Evaluation ◽

Control Policy ◽

Access Control Policy ◽

Attribute Based Access Control

Download Full-text

Eksplorasi ABAC dan XACML untuk Design Access Control pada Resource Digital

Jurnal Teknologi Informasi dan Ilmu Komputer ◽

10.25126/jtiik.2019651679 ◽

2019 ◽

Vol 6 (5) ◽

pp. 535

Author(s):

Fauzan Natsir ◽

Imam Riadi ◽

Yudi Prayudi

Keyword(s):

Access Control ◽

System Analysis ◽

Policy Design ◽

Control Policy ◽

Control Model ◽

Policy Statement ◽

Access Control Policy ◽

Access Control Model ◽

Digital Resources ◽

Attribute Based Access Control

Resource digital memerlukan sebuah mekanisme untuk mengatur policy terhadap kontrol untuk mendapatkan hak akes ke dalam suatu sistem. Akses kontrol lebih fleksibel dibanding dengan pendekatan otorisasi, autentikasi ataupun verifikasi yang sangat sederhana. Mekanisme access control policy dengan pendekatan atribut diyakini sebagai solusi adaptif yaitu ABAC (Attribute Based Access Control) dengan implementasi model XACML (Extensible Access Control Modelling Language). Desain policy ABAC ini disajikan dengan atribut-atribut dari salah satu studi kasus resource digital dengan sistem e-Library. e-Library merupakan salah satu resource digital dimana proses autentikasinya belum dimodelkan dengan atrubut subjek yang ada. Penelitian ini diawali dari identifikasi atribut dari rule, pemodelan ABAC resource digital, implementasi XACML, simulasi sistem dan analisis sistem. Hasil dari pengujian akses kontrol menggunakan ALFA (Axiomatics Language for Authorization) untuk pemberian kinerja akses kontrol terhadap resource digital. Hasil analisis dengan pendekatan ABAC dengan model XACML ini menyajikan suatu keamanan sistem dengan model akses kontrol berbasis atribut dari policy statement untuk menjadi solusi model akses kontrol yang dibuat sebelumnya dan mendukung model akses kontrol yang relevan untuk resource digital AbstractDigital resources require a mechanism to regulate policy against controls to get access rights to a system. Access control is more flexible than the very simple approach of authorization, authentication or verification. The access control policy with the attribute approach is believed to be an adaptive solution, namely ABAC (Attribute Based Access Control) with the implementation of the XACML (Extensible Access Control Modeling Language) model. This ABAC policy design is presented with attributes from one of the digital resource case studies with the e-Library system. e-Library is one of the digital resources where the authentication process has not been modeled with the existing subject matter. This study begins with the identification of the attributes of the rule, digital ABAC resource modeling, XACML implementation, system simulation and system analysis. The results of testing access control using ALFA (Axiomatics Language for Authorization) to provide performance control access to digital resources. The results of the analysis using the ABAC approach with the XACML model present a system security with attribute-based access control models from policy statements to be a solution to the previously created access control model and support the access control model relevant for digital resources

Download Full-text

Measurement and Prediction of Access Control Policy Evaluation Performance

IEEE Transactions on Network and Service Management ◽

10.1109/tnsm.2015.2486519 ◽

2015 ◽

Vol 12 (4) ◽

pp. 526-539 ◽

Cited By ~ 4

Author(s):

Bernard Butler ◽

Brendan Jennings

Keyword(s):

Access Control ◽

Policy Evaluation ◽

Control Policy ◽

Evaluation Performance ◽

Access Control Policy ◽

Évaluation Performance

Download Full-text

Data Sharing for Context-Sensitive Access Control Policy Evaluation and Enforcement

International Journal of Computer Network and Information Security ◽

10.5815/ijcnis.2012.11.02 ◽

2012 ◽

Vol 4 (11) ◽

pp. 11-20 ◽

Cited By ~ 1

Author(s):

Hassan Rasheed

Keyword(s):

Access Control ◽

Data Sharing ◽

Policy Evaluation ◽

Control Policy ◽

Access Control Policy ◽

Context Sensitive

Download Full-text

Attribute-Tree Based Hierarchical Hidden Credential Model

Advanced Materials Research ◽

10.4028/www.scientific.net/amr.546-547.604 ◽

2012 ◽

Vol 546-547 ◽

pp. 604-611

Author(s):

Wei Jin Ge ◽

Xiao Hui Hu

Keyword(s):

Access Control ◽

Control Policy ◽

Tree Structure ◽

Sensitive Information ◽

Access Control Policy ◽

Attribute Model ◽

Identity Based ◽

Attribute Based Access Control ◽

Load Network ◽

Access Policies

Hidden credentials are useful in situations where requests for service, credentials, access policies and resources are extremely sensitive. Current research related to hidden credentials has the shortage that the attribute model cannot provide the complex description. This paper presents a hierarchical hidden credential model which combines the attribute tree structure and the hierarchical identity-based encryption. Attribute tree structure is given that is used to organize sensitive information and the hierarchical hidden credential model is applied to carry and transport credentials, sensitive access control policy, and private resource and so on. This model expands the attribute from a simple atom one to an attribute tree. After the evaluation, it is proven that this model overcomes the shortcomings such as high-load network communication, too many credential exchanges which was caused by attribute-based access control policy. The usability and expansibility of hidden credentials were improved also.

Download Full-text