Earticle

초록

영어

Preserving privacy is a challenge and requires the management of access control, which may be based on role, purpose or trust. There are many recent advances of access control models have been developed to avoid unauthorized users access to the privacy. However, there are still issues that impede the development of effective access control. The issue highlight in this paper is inappropriate access and use of sensitive attributes by authorized users. Therefore, it is critical to design an efficient access control model based on trust to protect sensitive attributes from untrusted user. In this paper, we propose a new access control model based on trust called role performance trust-based access control to permit trusted user access to sensitive attributes. Subsequently, we also propose a comprehensive policy to permit user access sensitive attributes based on two trust metrics namely user experience and behaviour. To evaluate the trustworthiness of authorized user, we propose a quantification method to measure those metrics. Based on the results, role performance trust-based access control may significantly permit or prohibit access to personal information, especially sensitive attributes by authorized users. This model is capable to solve the issue of authorized user without trust to access sensitive attributes.

목차

Abstract
 1. Introduction
 2. A Comprehensive Policy
  2.1. Properties
  2.2. Quantifying Experience
  2.3. Quantifying Recommendation
  2.4. Computing Trustworthiness
 3. Access Control Mechanism
 4. User Access Decision
 5. Results and Discussion
  5.1. Results
  5.2. RPTBAC Query Modification Algorithm
  5.3. Tests and Validation on RPTBAC Mechanism Implementation
 6. Related Works
 7. Conclusion and Future Work
 References

키워드

저자

• Zhanjiang Wang [ Harbin University of Commerce, Harbin, China ]
• Shuoning Wang [ Heilongjiang Institute of Tourism, Harbin, China ]
• Ling Wang [ Harbin University of Commerce, Harbin, China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605