Abstract:Traditional access control systems exhibit limitations in providing flexible authorization and fine-grained access in the face of increasingly complex and dynamic access scenarios. This paper proposes a context-aware risk access control model to address these challenges. By developing a multi-level contextual risk indicator system, the model comprehensively considers real-time contextual information associated with access requests, dynamically evaluates the risk level of these requests, and compares the outcomes with predefined risk policies to facilitate access decisions. This approach enhances the dynamism and flexibility of access control. To improve the accuracy and reliability of risk assessments, we propose a combination weighting method grounded in game theory. This method reconciles subjective biases and the limitations of objective data by integrating both subjective and objective weighting techniques, thus optimizing the determination process for risk factor weights. Furthermore, smart contracts are introduced to monitor user behavior during access sessions, thereby preventing malicious attacks and the leakage of sensitive information. Finally, the model's performance and authorization granularity are assessed through empirical experiments. The results indicate that the model effectively addresses the requirements of dynamic and fine-grained access scenarios, improving the system's adaptability to risk fluctuations while safeguarding sensitive information.

A Time and Mutable Attribute-Based Access Control Model.

A Task-Role Based Access Control Model with Multi-Constraints

Dynamic Security Access Control Model Based on System Reliability

An Access Control Scheme with Fine-Grained Time Constrained Attributes Based on Smart Contract and Trapdoor

Towards A Generic Formal Framework for Access Control Systems

Access control model based on dynamic rules

A RBAC Model Based on Multi-granularities of Time Constraints.

Survey on Attribute Mutability of Usage Control

Realization Distributed Access Control Based on Ontology and Attribute with OWL

Full Business Model Oriented Access Control Method

Multilevel Multi-policy Access Control Model for Collaborative Application

Context-Aware Risk Attribute Access Control

Resource and Attribute Based Access Control Model for System with Huge Amounts of Resources.

An Access Control Model for Trustworthy Network

A conditional temporal role-based access control model

Modeling, Implementation and Application of Extensible Access Control

Object-based Multi-Subject Access Control Model

Attribute-based Universal Access Control Framework in Open Network Environment

A Trust and Context Based Access Control Model for Distributed Systems

Access Control Model for Web Services Based on Attribute Certificate

FABAC: A Flexible Fuzzy Attribute-Based Access Control Mechanism.