Title: An authorisation certificate-based access control model

Authors: Wenxin Li; Jingsha He; Nafei Zhu; Shuting Jin; Da Teng

Addresses: Faculty of Information Technology, Beijing University of Technology, Beijing 100124, China ' Faculty of Information Technology, Beijing University of Technology, Beijing 100124, China ' Faculty of Information Technology, Beijing University of Technology, Beijing 100124, China ' Faculty of Information Technology, Beijing University of Technology, Beijing 100124, China ' Faculty of Information Technology, Beijing University of Technology, Beijing 100124, China

Abstract: There are currently many types of access control models and schemes that have been proposed to protect valuable resources in a distributed environment. Many such models have failed to take into consideration efficiency, security, practical implementation and management at the same time. Based on the analysis of conventional certificate-based access control characteristics, this paper proposes an authorisation certificate-based access control (ACBAC) model to realise access control in a distributed environment. Employing certificates in access control can help meet the various requirements in distributed networks or systems while ensuring security to a great extent. Efficiency and security can thus be improved by delegating the functions of making access authorisation decisions to the certificate issuer (CI). We will formally describe the model, introduce the application scenarios and the processes of the model, and provide the details of implementation. Finally, the effectiveness and superiority of the model is verified through experiment and analysis.

Keywords: authorisation certificate; access control; access control model; distributed control; formalisation.

DOI: 10.1504/IJSN.2021.119393

International Journal of Security and Networks, 2021 Vol.16 No.4, pp.258 - 266

Received: 04 Oct 2020
Accepted: 04 Oct 2020
Published online: 02 Dec 2021 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article