Abstract:Traditional access control systems exhibit limitations in providing flexible authorization and fine-grained access in the face of increasingly complex and dynamic access scenarios. This paper proposes a context-aware risk access control model to address these challenges. By developing a multi-level contextual risk indicator system, the model comprehensively considers real-time contextual information associated with access requests, dynamically evaluates the risk level of these requests, and compares the outcomes with predefined risk policies to facilitate access decisions. This approach enhances the dynamism and flexibility of access control. To improve the accuracy and reliability of risk assessments, we propose a combination weighting method grounded in game theory. This method reconciles subjective biases and the limitations of objective data by integrating both subjective and objective weighting techniques, thus optimizing the determination process for risk factor weights. Furthermore, smart contracts are introduced to monitor user behavior during access sessions, thereby preventing malicious attacks and the leakage of sensitive information. Finally, the model's performance and authorization granularity are assessed through empirical experiments. The results indicate that the model effectively addresses the requirements of dynamic and fine-grained access scenarios, improving the system's adaptability to risk fluctuations while safeguarding sensitive information.

Trust-Risk-Game Based Access Control in Cross Domain Application

Using Trust and Risk in Access Control for Grid Environment

A New Trust Framework for Resource-Sharing in the Grid Environment

Community-based Model and Access Control for Information Grid

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Semantic-Aware Access Control for Grid Application

Trust Model to Enhance Security and Interoperability of Cloud Environment

A Game Theoretic Approach Based Access Control Mechanism

Dynamic Resource Access Using Graphical Game in Asymmetric Wireless Networks.

A Trust-Role Based Context Aware Access Control Model

Context-Aware Risk Attribute Access Control

Trust Based Access Control in Infrastructure-Centric Environment

A Trust and Context Based Access Control Model for Distributed Systems

A cloud-user behavior assessment based dynamic access control model

Access Control Model Based on Trust-role

Decentralized Trust Management: Risk Analysis and Trust Aggregation

A trust model based on fuzzy set in peer-to-peer network

An Access Control Model for Trustworthy Network

Control in New Network Environment

Access Control in New Network Environment

iSTRICT: An Interdependent Strategic Trust Mechanism for the Cloud-Enabled Internet of Controlled Things