Wang, Hua and Sun, Lili and Varadharajan, Vijay (2010) Purpose-based access control policies and conflicting analysis. In: SEC 2010: Security and Privacy: Silver Linings in the Cloud, 20-23 Sep 2010, Brisbane, Australia.
PDF (Conference Program)
PDF (Published Version)
This paper proposes a purpose-based framework for supporting privacy preserving access control policies and mechanisms. The mechanism enforces access policy to data containing personally identifiable information. The key component of the framework is purpose involved access control models (PAC) that provide full support for expressing highly complex privacy-related policies, taking into account features like purposes and conditions. A policy refers to an access right that a subject can have on an object, based on attribute predicates, obligation actions, and system conditions. Policy conflicting problems may arise when new access policies are generated. The structure of purpose involved access control policy is studied, and efficient conflict-checking algorithms are developed. Finally a discussion of our work in comparison with other access control and frameworks such as EPAL is presented.
|Item Type:||Conference or Workshop Item (Commonwealth Reporting Category E) (Paper)|
|Additional Information:||This conference was part of the World Computer Congress. (Security and Privacy: Silver Linings in the Cloud (SEC 2010)Permanent restricted access to paper due to publisher copyright restrictions.|
|Uncontrolled Keywords:||purpose; privacy; access control; conflicts; authentication; cloud computing; intrusion detection; network security|
|Depositing User:||Dr Hua Wang|
|Date Deposited:||28 Nov 2010 09:28|
|Last Modified:||02 Jul 2013 23:59|
Actions (login required)
|Archive Repository Staff Only|