New paradigms for access control in open environments

Many access control models and policies have been proposed in recent years for different purposes. Access control is now evolving with the complex environments that it supports. In open environments such as the Internet, the decision to grant access to a resource is often based on the characteristics of the requestor rather than its identity. Also, people have often little control over their personal information once it has been disclosed to third parties. Privacy and secondary usage regulations are increasingly demanding attention. In this paper, we present the emerging trends in the access control field to address the new needs and desiderata of today’s systems. In particular, we discuss two new access control paradigms and outline some R&D challenges that should be addressed.