An Integrated Approach for the Enforcement of Contextual Permissions and Pre-Obligations - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue International journal of mobile computing and multimedia communications Année : 2011

An Integrated Approach for the Enforcement of Contextual Permissions and Pre-Obligations

Résumé

Pre-obligations denote actions that may be required before access is granted. The successful fulfillment of pre-obligations leads to the authorization of the requested access. Pre-obligations enable a more flexible enforcement of authorization policies. This paper formalizes interactions between the obligation and authorization policy states when pre-obligations are supported and investigates their use in a practical scenario. The main advantage of the presented approach is that it gives pre-obligations both declarative semantics using predicate logic and operational semantics using Event-Condition-Action ECA rules. Furthermore, the presented framework enables policy designers to easily choose to evaluate any pre-obligation either 1 statically an access request is denied if the pre-obligation has not been fulfilled; or 2 dynamically users are given the possibility to fulfill the pre-obligation after the access request and before access is authorized.
Fichier principal
Vignette du fichier
Elrakaiby2011.pdf (567.73 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01162141 , version 1 (02-05-2023)

Identifiants

  • HAL Id : hal-01162141 , version 1

Citer

Yehia El Rakaiby, Frédéric Cuppens, Nora Cuppens-Bouhlahia. An Integrated Approach for the Enforcement of Contextual Permissions and Pre-Obligations. International journal of mobile computing and multimedia communications, 2011, 3, pp.33 - 51. ⟨hal-01162141⟩
87 Consultations
12 Téléchargements

Partager

Gmail Facebook X LinkedIn More