A contextual multilevel access control model Online publication date: Sat, 29-Nov-2014
by Narhimène Boustia; Aïcha Mokhtari
International Journal of Internet Technology and Secured Transactions (IJITST), Vol. 3, No. 4, 2011
Abstract: This paper present a dynamic multilevel access control model based on description logic with default and exception to capture the context feature. To define a security policy independently of the implementation, our access control model is structured in two levels: a concrete level and an abstract level. Subject and object are respectively abstracted into role and view. The level is assigned to role instead of subject and to the view instead of object. All subjects who play same role have the same level of clearance and all objects that belong to the same view have the same classification level. A subject is authorised to access to the object if its clearance level is greater than or equal to the classification level of object in a given context. The context allows us to provide dynamic authorisation, to each context switch, new authorisations are deduced. Our model allows the representation of composed contexts, the addition of new context and exception to the current context.
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Internet Technology and Secured Transactions (IJITST):
Login with your Inderscience username and password:
Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.
If you still need assistance, please email subs@inderscience.com
Our Blog 
Follow us on Twitter 
Visit us on Facebook