Access control models, such as the ones supported by commercial DBMSs, are not yet able to fully meet many application needs. An important requirement derives from the temporal dimension that permissions have in many real-world situations. Permissions are often limited in time or may hold only for specific periods of time. In this article, we present an access control model in which periodic temporal intervals are associated with authorizations. An authorization is automatically granted in the specified intervals and revoked when such intervals expire. Deductive temporal rules with periodicity and order constraints are provided to derive new authorizations based on the presence or absence of other authorizations in specific periods of time. We provide a solution to the problem of ensuring the uniqueness of the global set of valid authorizations derivable at each instant, and we propose an algorithm to compute this set. Moreover, we address issues related to the efficiency of access control by adopting a materialization approach. The resulting model provides a high degree of flexibility and supports the specification of several protection requirements that cannot be expressed in traditional access control models.
An access control model supporting periodicity constraints and temporal reasoning / E. Bertino, C. Bettini, E. Ferrari, P. Samarati. - In: ACM TRANSACTIONS ON DATABASE SYSTEMS. - ISSN 0362-5915. - 23:3(1998 Sep), pp. 231-285.
|Titolo:||An access control model supporting periodicity constraints and temporal reasoning|
BETTINI, CLAUDIO (Secondo)
SAMARATI, PIERANGELA (Ultimo)
|Parole Chiave:||Access control; H.2.7 [Information Systems]: Database Administration - security, integrity, and protection; Periodic authorization; Security; Temporal constraints; Time management|
|Settore Scientifico Disciplinare:||Settore INF/01 - Informatica|
|Data di pubblicazione:||set-1998|
|Digital Object Identifier (DOI):||http://dx.doi.org/10.1145/293910.293151|
|Appare nelle tipologie:||01 - Articolo su periodico|