Paper Info
Title
Towards a Usage Control Policy Specification with Petri Nets
Abstract
Access control aims at restricting access to resources instantly. However, in collaborative computing environments with shared resources and distributed right management systems more advanced controlling mechanisms are required. For example, the control of the usage of a resource may need to be continuous, obligations is required, and concurrency is an important aspect when different users use a shared resource. To overcome these shortcomings of traditional access control, usage control has been proposed and investigated recently. In this paper we introduce a new usage control policy specification. Beyond existing approaches, the novelty of our policy is threefold: first, the ability to integrate the functional and security aspects of the system, thus lending support to control system behavior continuously. Second, post obligation is supported in a way that a violation of any rule during the current usage session, or after it ends, can affect the decisions of future usages. Finally, concurrency rules are embodied in the policy model, thus concurrent usages by different users to shared resources are controlled.
Year
DOI
Venue
2009
10.1007/978-3-642-05151-7_11
OTM Conferences (2)
Keywords
Field
DocType
new usage control policy,traditional access control,current usage session,petri nets,access control,different user,concurrent usage,usage control policy specification,policy model,future usage,usage control,shared resource,control system,petri net,management system
Obligation,Petri net,Computer security,Concurrency,Computer science,Access control,Novelty,Control system,Shared resource,Management system
Conference
Volume
ISSN
Citations 
5871
0302-9743
4
PageRank 
References 
Authors
0.39
9
3
Name
Order
Citations
PageRank
Basel Katt17711.48
Zhang Xinwen21695104.61
Michael Hafner314511.46