Abstract:Sensitive information is one of core competence concerning with the development of the enterprise business. Tremendous pressure on today's enterprises to achieve and sustain competitive advantage has led to heightened efforts to protect sensitive information. Many enterprises have recognized that the key to sensitive information management improvement lies in the better access control model. In this paper, we present a boundary-based access control model incorporating an advanced security mechanism, in order to support fine-grained authorizations in the right time for the provision of services, based on the analysis of system boundary. In this model, access permissions are controlled by the state transitions at different layers including workflow layers, control layers and data layers. The access control mechanism is based on an RBAC model, which incorporates dynamic context information. Context is classified based on the analysis of system boundary into six main categories, which is further categorized as simple condition and composite condition, thus forming a multi-level context. In a multi-level hierarchy of context conditions, the access control model is implemented dynamically, by checking the context constraint associated with each access task at the time of the specific request submission, whose functionality and the constituent parts have been described formally and in detail.

A Purpose-Involved Role-Based Access Control Model

A Task-Role Based Access Control Model with Multi-Constraints

Dynamic Purpose-Based Access Control

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

The research for spatial role-based access control model

A Purpose-Based Privacy-Aware System Using Privacy Data Graph

Privacy-Aware Data Purpose Based Access Control for Relational Database

Relation-Based Access Control: an Access Control Model for Context-Aware Computing Environment

An Enhanced Role-Based Access Control Model of Database

A Role-Based Access Control Model that Supports Authorization with The Combination of Static and Dynamic

A Boundary-based Access Control Model for Sensitive Information

An Extended Role-Based Access Control Model and Method

Extended Access Control Model Based on RBAC

A Team-role-based Document Access Control Model

Design and Implementation of Privacy Protection Model Based RBAC

An Extended RBAC Model for Uniform Implementation of Role Hierarchy and Constraint

PURPOSE MANAGEMENT-BASED PRIVACY ACCESS CONTROL MODEL FOR HIS

Kind of user behaviour trust and role based dynamic access control model

Context Aware and Group Based Access Control

Research on Role Permission and Role Hierarchy Based on Role- based Access Control Model

Research and Implementation of Access Control Based on the Extended Role-Based Access Control (X-RBAC) Model