Fine Grained Attribute Based Access Control Model for Privacy Protection

摘要

Due to the rapid development of large scale and big data systems, attribute-based access control model has inaugurated a new wave in the research field of access control models. In this paper, we propose a novel and comprehensive framework for enforcing attribute-based security policies stored in JSON documents. We build a lightweight grammar for conditional expressions that are the combination of subject, resource, and environment attributes so that the policies are flexible, dynamic and fine grained. Moreover, with the approach of attribute-based access control, it can be applied to specify access purposes and intended purposes in purpose-based access control models for privacy protection. The experiment is carried out to illustrate the relationship between the processing time for access decision and the complexity of policies.