Activity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems

Traditionally, access control solutions have focused on how to utilize a specific type of decision parameter for access control decisions. While these “decision parameter”-focused approaches have been well accepted, they typically consider access control with centralized admini...

Descripción completa

Guardado en:
Detalles Bibliográficos
Autores principales: Jaehong Park, Ravi Sandhu, Maanak Gupta, Smriti Bhatt
Formato: article
Lenguaje:EN
Publicado: IEEE 2021
Materias:
Acceso en línea:https://doaj.org/article/2fce0721ec6b48dcb5f5b19197195cec
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
id oai:doaj.org-article:2fce0721ec6b48dcb5f5b19197195cec
record_format dspace
spelling oai:doaj.org-article:2fce0721ec6b48dcb5f5b19197195cec2021-11-18T00:09:21ZActivity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems2169-353610.1109/ACCESS.2021.3126201https://doaj.org/article/2fce0721ec6b48dcb5f5b19197195cec2021-01-01T00:00:00Zhttps://ieeexplore.ieee.org/document/9605673/https://doaj.org/toc/2169-3536Traditionally, access control solutions have focused on how to utilize a specific type of decision parameter for access control decisions. While these “decision parameter”-focused approaches have been well accepted, they typically consider access control with centralized administration. Smart and collaborative computing systems (SCSs) such as online social networks, the Internet of Things (IoT) and connected cyber-physical systems (CPSs) require a disparate approach to meet their unique and complex access control requirements primarily because there are multiple participants who create, share, manage and protect resources (e.g., files, smart devices) individually, collaboratively or even competitively. A distinct feature of SCSs is the diffuse nature of control activities and their complex influence on other activities. Activity control (ACON) extends the scope of traditional access control models and considers how multiple administrative authorities (including users) can manage complex and interacting usage, service and control activities. In this paper, we articulate key characteristics and limitations of various existing access control models and highlight the significance and necessity of activity control in smart collaborative ecosystems. We then propose an extended ACON framework for catering to the needs of dynamic SCSs. Furthermore, we compare existing access control design principles and propose a set of activity control design principles for smart and collaborative computing systems. The proposed ACON framework and design principles will provide a solid foundation for secure SCS design and development.Jaehong ParkRavi SandhuMaanak GuptaSmriti BhattIEEEarticleAccess controlactivity controlsmart systemconnected systemcollaborative systemcyber physical systemsElectrical engineering. Electronics. Nuclear engineeringTK1-9971ENIEEE Access, Vol 9, Pp 151004-151022 (2021)
institution DOAJ
collection DOAJ
language EN
topic Access control
activity control
smart system
connected system
collaborative system
cyber physical systems
Electrical engineering. Electronics. Nuclear engineering
TK1-9971
spellingShingle Access control
activity control
smart system
connected system
collaborative system
cyber physical systems
Electrical engineering. Electronics. Nuclear engineering
TK1-9971
Jaehong Park
Ravi Sandhu
Maanak Gupta
Smriti Bhatt
Activity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems
description Traditionally, access control solutions have focused on how to utilize a specific type of decision parameter for access control decisions. While these “decision parameter”-focused approaches have been well accepted, they typically consider access control with centralized administration. Smart and collaborative computing systems (SCSs) such as online social networks, the Internet of Things (IoT) and connected cyber-physical systems (CPSs) require a disparate approach to meet their unique and complex access control requirements primarily because there are multiple participants who create, share, manage and protect resources (e.g., files, smart devices) individually, collaboratively or even competitively. A distinct feature of SCSs is the diffuse nature of control activities and their complex influence on other activities. Activity control (ACON) extends the scope of traditional access control models and considers how multiple administrative authorities (including users) can manage complex and interacting usage, service and control activities. In this paper, we articulate key characteristics and limitations of various existing access control models and highlight the significance and necessity of activity control in smart collaborative ecosystems. We then propose an extended ACON framework for catering to the needs of dynamic SCSs. Furthermore, we compare existing access control design principles and propose a set of activity control design principles for smart and collaborative computing systems. The proposed ACON framework and design principles will provide a solid foundation for secure SCS design and development.
format article
author Jaehong Park
Ravi Sandhu
Maanak Gupta
Smriti Bhatt
author_facet Jaehong Park
Ravi Sandhu
Maanak Gupta
Smriti Bhatt
author_sort Jaehong Park
title Activity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems
title_short Activity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems
title_full Activity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems
title_fullStr Activity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems
title_full_unstemmed Activity Control Design Principles: Next Generation Access Control for Smart and Collaborative Systems
title_sort activity control design principles: next generation access control for smart and collaborative systems
publisher IEEE
publishDate 2021
url https://doaj.org/article/2fce0721ec6b48dcb5f5b19197195cec
work_keys_str_mv AT jaehongpark activitycontroldesignprinciplesnextgenerationaccesscontrolforsmartandcollaborativesystems
AT ravisandhu activitycontroldesignprinciplesnextgenerationaccesscontrolforsmartandcollaborativesystems
AT maanakgupta activitycontroldesignprinciplesnextgenerationaccesscontrolforsmartandcollaborativesystems
AT smritibhatt activitycontroldesignprinciplesnextgenerationaccesscontrolforsmartandcollaborativesystems
_version_ 1718425214708088832