Recent Advances in Access Control Models

Abstract

Past generations of access control models, when faced with an access request, have issued a simple “yes” or “no” answer to the access request resulting in access being granted or denied. Recent advances in application areas have introduced new dimensions to access control needs, and for many applications such as business-to-business (B2B) applications and auctions “yes/no” responses are just not enough.

This talk will discuss several access control models that have been recently proposed to address these emerging needs including models that provide policy-neutral flexible access control and their efficient implementations; models that incorporate richer semantics for access control, such as adding provisions and obligations. We will also discuss the recent work on policy algebras for combining independent authorization specifications.