A dynamic access control model for object-oriented system

The authors propose a dynamic access control model (DACM) to meet the access control requirements of an environment that frequently changes and adjusts user access privileges and/or target object confidential level. For the DACM, one uses an object-oriented technique to describe the whole model and also to implement its access control mechanism called the dynamic access control system. A real case similar to the DACM has been implemented in the Administration Information System of the Central Police University. The performance shown in this case is quite good from the viewpoint of the end user and system developers/maintainers. The DACM technique can be used to cope with a dynamically changing environment