A logical specification for usage control
Proceedings of the ninth ACM symposium on Access control models and technologies, 2004•dl.acm.org
Recently presented usage control (UCON) has been considered as the next generation
access control model with distinguishing properties of decision continuity and attribute
mutability. Ausage control decision is determined by combining authorizations, obligations,
and conditions, presented as UCONABC core models by Park and Sandhu. Based on these
core aspects, we develop afirst-order logic specification of UCON with Lamport's
temporallogic of actions (TLA). The building blocks of this model include:(1) a sequence of …
access control model with distinguishing properties of decision continuity and attribute
mutability. Ausage control decision is determined by combining authorizations, obligations,
and conditions, presented as UCONABC core models by Park and Sandhu. Based on these
core aspects, we develop afirst-order logic specification of UCON with Lamport's
temporallogic of actions (TLA). The building blocks of this model include:(1) a sequence of …
Recently presented usage control (UCON) has been considered as the next generation access control model with distinguishing properties of decision continuity and attribute mutability. Ausage control decision is determined by combining authorizations, obligations, and conditions, presented as UCONABC core models by Park and Sandhu. Based on these core aspects, we develop afirst-order logic specification of UCON with Lamport's temporallogic of actions (TLA). The building blocks of this model include:(1) a sequence of states expressed by attributes of subjects, objects, and the system, (2) state predicates on subject andobject attributes, (3) pre-defined authorization actions performed by the security system and subjects, (4) obligation actions, and(5) condition predicates on system attributes. For a UCON model we define a set of temporal logic formulas that hold as usage control policies. We show the flexibility and expressive capability of this logic model by specifying the new features and core models of UCON.

Showing the best result for this search. See all results