An Authorization Model for Collaborative Access Control

Chen-hua Ma,Guo-dong Lu,Jiong Qiu
DOI: https://doi.org/10.1631/jzus.c0910564
2010-01-01
Journal of Zhejiang University SCIENCE C
Abstract:Collaborative access control is receiving growing attention in both military and commercial areas due to an urgent need to protect confidential resources and sensitive tasks. Collaborative access control means that multiple subjects should participate to make access control decisions to prevent fraud or the abuse of rights. Existing approaches to access control cannot satisfy the requirements of collaborative access control. To address this concern, we propose an authorization model for collaborative access control. The central notions of the model are collaborative permission, collaboration constraint, and collaborative authorization policy, which make it possible to define the collaboration among multiple subjects involved in gaining a permission. The implementation architecture of the model is also provided. Furthermore, we present effective conflict detection and resolution methods for maintaining the consistency of collaborative authorization policies.
What problem does this paper attempt to address?