Access Control of RFID Middleware Using Extended Usage Control Model

RFID (radio frequency identification) is the key technology to open the new era of computing history, i.e., machine perception or sensor age. However, one major stumbling block of using RFID technology in ubiquitous environment is the lack of security enforcement. In this paper, we introduce a systematic approach to enhance RFID middleware with the access control, user authentication, and session management. Delegation of access right among distributed security manager has been added to the usage control model and the formal description of access control model is defined. Using the proposed access control model we show how SSO (single sign on) can be realized in distributed RFID systems.