A Dynamic Security Policies Generation Model for Access Control in Smart Card Based Applications

摘要

Significant increase in the use of smart cards in diverse set of realtime applications has lead to the proliferation of number of attack scenarios including physical and logical attacks. Since the security of smart card based systems and applications depends upon the security of smart cards being a key element of communication, it provokes researchers from enterprises and aca-demia to come forward and to exchange their ideas to ensure security of these systems. To authenticate different users in different application scenarios requires the development of security policies that can effectively satisfy the heterogeneous security requirements. In this paper, we propose a contextual security policy generation model for applications involving authentication using smart cards. The paper illuminates the factors that are crucial in determining a dynamic set of security policies. We also implement our model on Access Control Policy Testing (ACPT) tool in order to test and verify its correctness.