Enforcing spatial constraints for mobile RBAC systems

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2010, Pages 99-108

  Kirkpatrick, Michael S ^a   Bertino, Elisa ^a  

^a Purdue University   (United States)

Author keywords

Continuity of usage; Location based access control; RBAC

Indexed keywords

ACCESS CONTROL POLICIES; CONTINUITY OF USAGE; DYNAMIC NATURE; LOCATION BASED; MOBILE ENVIRONMENTS; NEAR-FIELD COMMUNICATION; PERVASIVE COMPUTING SYSTEMS; POLICY RESTRICTIONS; PROTOTYPE IMPLEMENTATIONS; RBAC MODEL; RBAC POLICY; ROLE-BASED ACCESS CONTROL; SECURITY ADVANTAGE; SPATIAL CONSTRAINTS; USAGE CONTROL;

NETWORK PROTOCOLS; NETWORK SECURITY; SECURITY SYSTEMS; SOFTWARE PROTOTYPING;

ACCESS CONTROL;

EID: 77954894517     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1809842.1809860     Document Type: Conference Paper

References (33)

1. GISToolkit. http://gistoolkit.sourceforge.net/.
2. Advanced Card Systems Limited. ACR122 NFC contactless smart card reader software development kit. http://www.acs.com.hk/acr122-sdk.php.
3. S. Aich, S. Sural, and A. K. Majumdar. STARBAC: Spatiotemporal role based access control. In OTM Conferences, 2007.
4. V. Atluri and S. A. Chun. A geotemporal role-based authorisation system. In International Journal of Information and Computer Security, volume 1, pages 143-168, 2007.
5. L. Bauer, L. F. Cranor, M. K. Reiter, and K. Vaniea. Lessons learned from the deployment of a smartphone-based access-control system. In Proceedings of the 3rd Symposium on Usable Privacy and Security (SOUPS), 2007.
6. C. Boyd and A. Mathuria. Protocols for Authentication and Key Establishment. Springer, 2003.
7. S. Chandran and J. Joshi. LoT RBAC: A location and time-based RBAC model. In Proceedings of the 6th Internation Conference on Web Information Systems Engineering (WISE'05), pages 361-375. Springer-Verlag, 2005.
8. M. J. Covington, W. Long, S. Srinivasan, A. K. Dev, M. Ahamad, and G. D. Abowd. Securing context-aware applications using environment roles. In Proceedings of the 6th ACM Symposium on Access Control Models and Technologies (SACMAT'01), pages 10-20, 2001.
9. M. L. Daimani, E. Bertino, B. Catania, and P. Perlasca. GEO-RBAC: A spatially aware RBAC. In ACM Transactions on Information and System Security (TISSEC), 2007.
10. M. L. Damiani and E. Bertino. Access control and privacy in location-aware services for mobile organizations. In 7th Internation Conference on Mobile Data Management, 2006.
11. S. Gritzalis and D. Spinellis. Cryptographic protocols over open distributed systems: A taxonomy of flaws and related protocol analysis tools. In 16th International Conference on Computer Safety, Reliability and Security (SAFECOMP'97), pages 123-137, September 1997.
12. F. Hansen and V. Oleschuk. SRBAC: A spatial role-based access control model for mobile systems. In Proceedings of the 8th Nordic Workshop on Secure IT Systems (NORDSEC'03), pages 129-141, October 2003.
13. F. Hansen and V. Oleshchuk. Application of role-based access control in wireless healthcare information systems. In Scandinavian Conference in Health Informatics, pages 30-33, 2003.
14. J. Heather, G. Lowe, and S. Schneider. How to prevent type flaw attacks on security protocols. In Proceedings of the 13th IEEE Workshop on Computer Security Foundations (CSFW'00), 2000.
15. R. J. Hulsebosch, A. H. Salden, M. S. Bargh, P. W. G. Ebben, and J. Reitsma. Context sensitive access control. In Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies (SACMAT'05), 2005.
16. JSR 257 Expert Group. JSR 257: Contactless communication API.
17. F. Kooman. The nfcip-java project. http://code.google.com/p/nfcip-java/.
18. L. Lamport. The temporal logic of actions. In ACM Transactions on Programming Languages and Systems (TOPLAS), 1994.
19. G. Madlmayr, J. Langer, C. Kantner, and J. Scharinger. NFC devices: Security and privacy. In The 3rd International Conference on Availability, Reliability and Security (ARES), pages 642-647. IEEE Computer Society, 2008.
20. S. Malladi, J. Alves-foss, and R. B. Heckendorn. On preventing replay attacks on security protocols. In In Proceedings of the International Conference on Security and Management, pages 77-83. CSREA Press, 2002.
21. C. Mulliner. Attacking NFC mobile phones. In EUSecWest 2008, May 2008.
22. NFC Forum. NFC forum tag type technical specifications. http://www.nfc-forum.org/.
23. Nokia. Nokia 6131 NFC SDK programmer's guide.
24. Open GIS Consortium. Open GIS geography markup language (GML) implementation specification. http://www.opengeospatial.org/standards/gml, 2003.
25. Organization for the Advancement of Structured Information Standards (OASIS). eXtensible Access Control Markup Language (XACML). http://www.oasis- open.org/committees/tc-home.php?wgabbrev=xacml/.
26. J. Park and R. Sandhu. The UCONABC usage control model. In ACM Transactions on Information and System Security, volume 7, pages 128-174, 2004.
27. I. Ray, M. Kumar, and L. Yu. LRBAC: A location-aware role-based access control model. In Proceedings of Internation Conference on Information Systems Security (ICISS), pages 147-161, 2006.
28. R. Sandhu. Role-based access control models. In IEEE Computer, Feb. 1996.
29. R. Sandhu. Role hierarchies and constraints for lattice-based access controls. In Fourth European Symposium on Research in Computer Security (ESORICS), 1996.
30. R. Sandhu. Role activation hierarchies. In 3rd ACM Workshop on Role-Based Access, 1998.
31. R. Sandhu, K. Ranganathan, and X. Zhang. Secure information sharing enabled by trusted computing and pei models. In ASIACCS'06: Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, pages 2-12, New York, NY, USA, 2006. ACM. (Pubitemid 46644718)
32. P. Syverson. A taxonomy of replay attacks. In Proceedings of the 7th IEEE Computer Security Foundations Workshop, 1994.
33. X. Zhang, J. Park, F. Parisi-Presicce, and R. Sandhu. A logical specification for usage control. In Proceedings of the Ninth ACM Symposium on Access Control Models and Technologies (SACMAT'04), 2004.