The IRMA Community
Newsletters
Research IRM
Click a keyword to search titles using our InfoSci-OnDemand powered search:
|
An Integrated Approach for the Enforcement of Contextual Permissions and Pre-Obligations
Abstract
Pre-obligations denote actions that may be required before access is granted. The successful fulfillment of pre-obligations leads to the authorization of the requested access. Pre-obligations enable a more flexible enforcement of authorization policies. This paper formalizes interactions between the obligation and authorization policy states when pre-obligations are supported and investigates their use in a practical scenario. The main advantage of the presented approach is that it gives pre-obligations both declarative semantics using predicate logic and operational semantics using Event-Condition-Action (ECA) rules. Furthermore, the presented framework enables policy designers to easily choose to evaluate any pre-obligation either (1) statically (an access request is denied if the pre-obligation has not been fulfilled); or (2) dynamically (users are given the possibility to fulfill the pre-obligation after the access request and before access is authorized).
Related Content
|
Tapan Kumar Behera.
© 2023.
20 pages.
|
|
B. Narendra Kumar Rao.
© 2023.
17 pages.
|
|
Blendi Rrustemi, Deti Baholli, Herolind Balaj.
© 2023.
18 pages.
|
|
Alma Beluli.
© 2023.
11 pages.
|
|
Jona Ndrecaj, Shkurte Berisha, Erita Çunaku.
© 2023.
15 pages.
|
|
Yllka Totaj.
© 2023.
12 pages.
|
|
Hla Myo Tun, Devasis Pradhan.
© 2023.
31 pages.
|
|
|