Information Security Architecture-Context Aware Access Control Model for Educational Applications

摘要

Information is an asset for every organization. The constantly increasing nature of computers systems on the functioning of organizations results in concerns about the threats to the information usage. Security requirements approached at the organization level initiate the need for models that capture the organizational and distributed aspects of information usage. Such models have to express organization specific security policies and internal controls aiming to protect information against unauthorized access and modification and against usage of information for unintended purposes. Existing systems follows Role Based Access Control models (RBAC) which are application dependent and whether they address the problems posed by mobile devices such as note books, Personal Digital Assistants (PDA), is an open question. What today’s organization require is flexible, authentication on necessity, context aware access control and enforcement of dynamic authorization? In this paper we propose Context Aware Information Security Architecture to fulfill the organization's security needs.