Temporal Access Control Based on Multiple Subjects

In the traditional history-based access control model, the policy is designed regarding only one subject. This policy is vulnerable, because if multi-subjects who have common interests collaborate, the access control may be bypassed. In addition, designing policy for multi-subjects´ access is indispensable for many online applications. Towards this problem, a temporal access control based on multi-subjects is proposed in this paper. The main idea is to make decision of access according to active multi-subjects´ history executions. A policy language is introduced and its syntax and semantics are defined formally. Finally, a policy verification algorithm is given and an example is used to illustrate it.