Abstract:With the integration of connected devices, artificial intelligence, and heterogeneous networks in IoT-driven cyber-physical systems, our society is evolving as a smart, automated, and connected community. In such dynamic and distributed environments, various operations are carried out considering different contextual factors to support the automation of collaborative devices and systems. These devices often perform long-lived operations or tasks (referred to as activities) to fulfill larger goals in the collaborative environment. These activities are usually mutable (change states) and interdependent. They can influence the execution of other activities in the ecosystem, requiring active and real-time monitoring of the entire connected environment. Recently, a vision for activity-centric access control(ACAC) was proposed to enable security modeling and enforcement from the perspective and abstraction of interdependent activities. The proposed ACAC incorporates four decision parameters: Authorizations(A), oBligations(B), Conditions(C), and activity Dependencies(D) for an object agnostic access control in smart systems. In this paper, we take a step further towards maturing ACAC by focusing on activity dependencies(D) and developing a family of formal mathematically grounded models, referred to as ACAC_D. These formal models consider the real-time mutability of activities in resolving active dependencies among various activities in the ecosystem. Activity dependencies can form a chain where it is possible to have dependencies of dependencies. In ACAC, we also consider the chain of dependencies while handling the mutability of an activity. We highlight the challenges while dealing with chain of dependencies, and provide solutions to resolve these challenges. We also present a proof of concept implementation of with performance analysis for a smart farming use case.

Specification and Enforcement of Activity Dependency Policies using XACML

The ACAC_D Model for Mutable Activity Control and Chain of Dependencies in Smart and Collaborative Systems

BlueSky: Activity Control: A Vision for "Active" Security Models for Smart Collaborative Systems

Semantic-Aware Access Control for Grid Application

Conformance Checking of Access Control Policies Specified in XACML

Detection of Multiple-Duty-Related Security Leakage in Access Control Policies

Supporting activity awareness in computer-mediated collaboration.

Achieving Efficient Access Control Via XACML Policy in Cloud Computing.

Using XACML to Define Access Control Policy in Information System

Towards A Generic Formal Framework for Access Control Systems

Detecting conflict of heterogeneous access control policies

XACML Extension for Graphs: Flexible Authorization Policy Specification and Datastore-independent Enforcement

Realization Distributed Access Control Based on Ontology and Attribute with OWL

Toward Systematic Testing of Access Control Policies

Realization of UCON Model Based on Extended-XACML

Adaptive ABAC Policy Learning: A Reinforcement Learning Approach

An Extension for Combination of Duty Constraints in Role-Based Access Control

Role and Activity Based Digital Campus Access Control Model

ACPT: A Tool for Modeling and Verifying Access Control Policies

Catch Me if You Can: A Secure Bilateral Access Control System with Anonymous Credentials

On attribute-based usage control policy ratification for cooperative computing context