Context-aware access control: Making access control decisions based on context information

2006 3rd Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services, MobiQuitous

Volumn , Issue , 2006, Pages

  Laehmund, Sven ^a   Walter, Thomas ^a   Gomez, Laurent ^b   Bussard, Laurent ^c   Oik, Eddy ^d  

^a DOCOMO EURO LABS   (Germany)

^b SAP Research   (France)

^c MICROSOFT   (United States)

^d TNO   (Netherlands)

Author keywords

Authorization service; Context information; Context aware access control; Message filter; Trust evaluation

Indexed keywords

COMPUTER SYSTEMS; DECISION MAKING; MOBILE COMPUTING; SECURITY OF DATA; SECURITY SYSTEMS; UBIQUITOUS COMPUTING;

AUTHORIZATION SERVICE; CONTEXT INFORMATION; CONTEXT-AWARE ACCESS CONTROL; MESSAGE FILTER; TRUST EVALUATION;

ACCESS CONTROL;

EID: 51349126228     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MOBIQ.2006.340450     Document Type: Conference Paper

References (24)

1. MOSQUITO, European research project, www.mosquitoonline.org.
2. MOSQUITO deliverable D3, "Report on ambient security architecture (including context-sensitive security and trust architecture)", March 2006.
3. S. Lachmund, F. Fransen, E. Olk, "Context-Awareness, Security and Trust", invited paper at the Eighth international Symposium on Wireless Personal Multimedia Communication (WPMC'05), Aalborg, Denmark, September 18-22, 2005.
4. Java Technology, Sun Microsystems Inc, http://java.sun.com.
5. G. Zhang, M. Parashar, Context-aware Dynamic Access Control for Pervasive Applications, 2004.
6. R. Bhatti, E. Bertino, A. Ghafoor, A Trust-Based Context-Aware Access Control Model for Web-Services, Distributed and Parallel Databases journal, 18 (1), 2005 pp. 83-105.
7. Y. Kim, C. Mon, D. Jeong, et.al., Context-Aware Access Control Mechanism for Ubiquitous Applications, LNCS 3528, p. 236, June 2005.
8. Web Services Enhancements (WSE 3.0), Microsoft, http://msdn.microsoft. com/webservices/webservices/building/wse.
9. OASIS (IBM, Microsoft, Sun, VeriSign). Web Services Security: SOAP Message Security 1.0. March 2004.
10. OASIS (Netegrity, Sun, RSA, BEA, IBM, VeriSign). Security Assertion Markup Language (SAML). Version 1.1. OASIS Standard. 2 September 2003.
11. OASIS (IBM, Sun, BEA, Entrust et al). extensible Access Control Markup Language (XACML). Version 1.1. Committee Specification, 7 August 2003.
12. IBM, Microsoft, RSA, VeriSign. Web Services Federation Language (WS-Federation). Version 1.0. July 8, 2003.
13. IBM, Microsoft, RSA, VeriSign. Web Services Security Policy Language (WS-SecurityPolicy). Version 1.0. December 18, 2002.
14. Microsoft, BEA, Canon, Intel. Web Services Dynamic Discovery (WS-Discovery). February 2004.
15. IBM, Microsoft, BEA, SAP. Web Services Metadata Exchange (WS-MetadataExchange). March 2004.
16. Computer Associates, IBM, Layer 7, Microsoft, Netegrity, Oblix, OpenNetwork, Ping Identity, Reactivity, RSA, VeriSign, Westbridge. Web Services Trust Language (WS-Trust). Version 1.1. May 2004.
17. OASIS, XACML profile for web-services, Working Draft 04, 29 Sept 03, http://www.oasis-open.org/committees/download.php/3661/draft-xacml-wspl-04.pdf.
18. SAML 2.0 profile of XACML v2.0, http://docs.oasis-open.org/xacml/2.0/ access_control-xacml-2.0-saml-profile-spec-os.pdf.
19. Organization for the Advancement of Structured Information Standards (OASIS), http://www.oasis-open.org/.
20. World Wide Web Consortium, Web Services, http://www.w3.org/2002/ws/.
21. L. Gomez, L. Moraru, D. Simplot-Ryl, K. Wrona, Using sensor and location information for context-aware access control, Proceedings of the 3rd IEEE International Region 8 Conference (EUROCON), Belgrade, Serbia & Montenegro, 2005.
22. S. Trabelsi, J.-C. Pazzaglia, Y. Roudier, Enabling Secure Discovery in a Pervasive Environment, 3rd International Conference on Security in Pervasive Computing (SPC 2006), York, UK, April 2006.
23. K, Wrona, L. Gomez, Context-aware security and secure context-awareness in ubiquitous computing environments, Annates Universitatis Mariae Curie-Sklodowska, Sectio AI Informatica, (in press).
24. nd IEEE SecureComm SECOVAL Workshop, September 1, 2006, in press.