User Behaviour Based Access Control Decision

A user´s behaviour for using a specific web service on Internet, like her/his biometric information, can be used to identify the use. In many cases, the user behaviour represented as a set of attributes can be classified as either normal or anomalous. This value or in conjunction with other attributes of the user can be used to authorise the user of having access to the web service. To a certain extent, it can protect against identity theft since it may be very difficult to impersonate on behaviours of using Internet. This article presents how a user´s behaviour for using a particular web service is observed and classified; how this behaviour attribute is securely transported across network; and how it used for access authorisation decision.