Smatch: Formal dynamic session management model for RBAC - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Journal of information security and applications Année : 2013

Smatch: Formal dynamic session management model for RBAC

Résumé

This paper extends RBAC sessions with shareability, reusability and switchability properties. We define the Smatch (Secure MAnagement of swiTCH) model in which authorized users can join, leave, reopen and reuse dynamic sessions. In Smatch, subjects can also share sessions and dynamically switch their role or function with other subjects from the same or different organizations. Subjects can authenticate using their function which will automatically activate the set of roles associated with this function. The Smatch model is based on the situation calculus which extends first order logic with actions. It provides means to specify contextual access control and authentication policies which apply to control functional behavior of dynamic sessions. We formally analyze decidability and complexity of several problems like decision, planning and proof of properties in the Smatch model. We also suggest an implementation of Smatch using Eyeos, an open-source web based Operating System.
Fichier non déposé

Dates et versions

hal-01159838 , version 1 (03-06-2015)

Identifiants

Citer

Frédéric Cuppens, Nora Cuppens-Bouhlahia, Meriam Ben Ghorbel, Stéphane Morucci, Nada Essaouini. Smatch: Formal dynamic session management model for RBAC. Journal of information security and applications, 2013, 18, pp.30 - 44. ⟨10.1016/j.jisa.2013.07.001⟩. ⟨hal-01159838⟩
111 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More