An Integrated Approach for the Enforcement of Contextual Permissions and Pre-Obligations - Laboratoire des Sciences et Techniques de l'Information, de la Communication et de la Connaissance, site ENIB Brest Accéder directement au contenu
Article Dans Une Revue International journal of mobile computing and multimedia communications Année : 2011

An Integrated Approach for the Enforcement of Contextual Permissions and Pre-Obligations

Résumé

Pre-obligations denote actions that may be required before access is granted. The successful fulfillment of pre-obligations leads to the authorization of the requested access. Pre-obligations enable a more flexible enforcement of authorization policies. This paper formalizes interactions between the obligation and authorization policy states when pre-obligations are supported and investigates their use in a practical scenario. The main advantage of the presented approach is that it gives pre-obligations both declarative semantics using predicate logic and operational semantics using Event-Condition-Action ECA rules. Furthermore, the presented framework enables policy designers to easily choose to evaluate any pre-obligation either 1 statically an access request is denied if the pre-obligation has not been fulfilled; or 2 dynamically users are given the possibility to fulfill the pre-obligation after the access request and before access is authorized.
Fichier principal
Vignette du fichier
Elrakaiby2011.pdf (567.73 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01162141 , version 1 (02-05-2023)

Identifiants

  • HAL Id : hal-01162141 , version 1

Citer

Yehia El Rakaiby, Frédéric Cuppens, Nora Cuppens-Bouhlahia. An Integrated Approach for the Enforcement of Contextual Permissions and Pre-Obligations. International journal of mobile computing and multimedia communications, 2011, 3, pp.33 - 51. ⟨hal-01162141⟩
87 Consultations
13 Téléchargements

Partager

Gmail Facebook X LinkedIn More