A State-Adaptive Access Control Model for Web-Based IDRS System

Author

Wu, Xinsong ; He, Yeping ; Zhou, Zhouyi

Author_Institution

Inst. of Software, Chinese Acad. of Sci., Beijing

Volume

2

fYear

2009

fDate

25-26 April 2009

Firstpage

172

Lastpage

175

Abstract

Role based access control reduces the cost of security administration of large-scale systems. However, it mainly abstracts a user from the function aspect, which is not enough for some complex large-scale systems. In Web-based IDRS (infectious disease reporting system), access control is based on not only the function attribute, but domain and category attributes of a user. Meanwhile, the domain and category attributes of a user need to adapt to state changes. We present a state-adaptive access control model that uses role, domain and category attributes to enforce access control. Moreover, it supports dynamic adjustment of domain and category attributes of a user based on state transition.

Keywords

Internet; authorisation; diseases; large-scale systems; medical computing; Web-based infectious disease reporting system; large-scale systems; role based access control; security administration; state-adaptive access control model; Abstracts; Access control; Cities and towns; Communication system security; Context modeling; Costs; Databases; Diseases; Large-scale systems; Virtual private networks; CDC; role based access control; state adaptive; virtual category; virtual domain;

fLanguage

English

Publisher

ieee

Conference_Titel

Networks Security, Wireless Communications and Trusted Computing, 2009. NSWCTC '09. International Conference on

Conference_Location

Wuhan, Hubei

Print_ISBN

978-1-4244-4223-2

Type

conf

DOI

10.1109/NSWCTC.2009.32

Filename

4908433