Abstract:Cross-border access to a variety of data such as market information, strategic information, or customer-related information defines the daily business of many global companies, including financial institutions. These companies are obliged by law to keep a data processing legal for all offered services. They need to fulfill different security objectives specified by the legislation. Therefore, they control access to prevent unauthorized users from using data. Those security objectives, for example confidentiality or secrecy, are often defined in the eXtensible Access Control Markup Language that promotes interoperability between different systems. In this paper, we show the necessity of incorporating the requirements of legislation into access control. Based on the work flow in a banking scenario we describe a variety of available contextual information and their interrelations. Different from other access control systems our main focus is on law-compliant cross-border data access. By including legislation directly into access decisions, this lawfulness can be ensured. We also describe our information model to demonstrate how these policies can be implemented into an existing network and how the components and contextual information interrelate. Finally, we outline an event flow for a request made from a remote user exemplifying how such a system decides about access.

Modeling Access Control Requirements in Feature Model

Towards accuracy of role-based access control configurations in component-based systems

Multi-level Access Control for Collaborative CAD

A Use Case Based Approach to Feature Models' Construction

Towards A Generic Formal Framework for Access Control Systems

A Feature-Oriented Approach to Modeling Requirements Dependencies

Modeling and analysis of non-functional requirements as aspects in a UML based architecture design

A Feature Oriented Approach to Modeling and Reusing Requirements of Software Product Lines

A Feature Interface Model Towards Distributed Solid Modeling

Realization Method about Access Control of System Based on Web

An Approach for Generation of J2EE Access Control Configurations from Requirements Specification.

An Approach to Constructing Feature Models Based on Requirements Clustering

Developing an access control management metamodel for secure digital enterprise architecture modeling

An exploratory study of the general requirement representation model for product configuration in mass customization mode

A Time and Mutable Attribute-Based Access Control Model.

&Lt;title>schema of Developing Feature-Based Modeling Systems</title>

Resource and Attribute Based Access Control Model for System with Huge Amounts of Resources.

From Requirements to Software Architecture: A Feature-Oriented Mapping Approach

Integrating Non-functional Requirement Modeling into Model Driven Development Method

A Feature-Oriented Domain Model and Its Modeling Process

Law-Aware Access Control and its Information Model