 |
    |
A Semantic Context-Aware Access Control Framework for Secure Collaborations in Pervasive Computing Environments
Alessandra Toninelli1, Rebecca Montanari1, Lalana Kagal2, and Ora Lassila3
1Dipartimento di Elettronica, Informatica e Sistemistica Università di Bologna, Viale Risorgimento, 2 - 40136 Bologna - Italy
atoninelli@deis.unibo.it
rmontanari@deis.unibo.it
2MIT CSAIL, 32 Vassar Street, Cambridge, MA 02139, USA
lkagal@csail.mit.edu
3Nokia Research Center Cambridge, 3 Cambridge Center, Cambridge, MA 02142, USA
ora.lassila@nokia.com
Abstract. Wireless connectivity and widespread diffusion of portable devices offer novel opportunities for users to share resources anywhere and anytime, and to form ad-hoc coalitions. Resource access control is crucial to leverage these ad-hoc collaborations. In pervasive scenarios, however, collaborating entities cannot be predetermined and resource availability frequently varies, even unpredictably, due to user/device mobility, thus complicating resource access control. Access control policies cannot be defined based on entity’s identities/roles, as in traditional access control solutions, or be specified a priori to face any operative run time condition, but require continuous adjustments to adapt to the current situation. To address these issues, this paper advocates the adoption of novel access control policy models that follow two main design guidelines: context-awareness to control resource access on the basis of context visibility and to enable dynamic adaptation of policies depending on context changes, and semantic technologies for context/policy specification to allow high-level description and reasoning about context and policies. The paper also describes the design of a semantic context-aware policy model that adopts ontologies and rules to express context and context-aware access control policies and supports policy adaptation.
LNCS 4273, p. 473 ff.
lncs@springer.com
© Springer-Verlag Berlin Heidelberg 2006