Analysis and Design of an Access Control Model Based on Credibility

An access control model based on credibility is proposed. The Community Authorization Service (CAS) is an authentication technology which allows service providers to delegate some policy authority to the virtual organization. While in open distributed systems, provider join or leave the domain frequently, so access-control policy in the server changes quickly. To reduce the server load, threshold value of credibility and a weight factor are applied in the model, and use Analytic Hierarchy Process (AHP) to analyze the weight of every rule. Providers adjust the threshold value and weight factor instead of changing policies in the server. First the server authenticates the requestor and gives him credibility, then synthesizes the credibility and trustworthiness. If the synthesis of credibility achieves the threshold value, the server gives him a certificate. The authentication policies and trustworthiness are both used in the model, thus flexibility and robustness are the advantages of this model.