A Fine Grain Attribute Enabled Access Control

Abstract

Attribute-Based Access Control model has attracted many researchers to come up with better techniques that can improve the current performance and policy modeling. The XACML policy language standard used by the attribute based access model uses rules and policy set to govern the access mechanism. The policy sets are complex rules consisting of several combinations of attribute and attribute values. Different techniques including policy compression are proposed to date to improve the performance compared with the standard ABAC implementation. However, no research is done to model the policy store based on attributes. This paper makes the first attempt on the design of an attribute enabled access control mechanism that takes benefit of the attribute store residing along with the policy. The proposed model can also accommodate the policies defined in currently used enterprise model, ABAC. This work also presents a policy conversion method from ABAC to the proposed model design. A performance analysis is given using real-life and synthetic dataset, that shows its applicability to the real world scenarios and the characterized policy set it intends to satisfy. The comparison between the decision evaluation over the proposed model with the other model shows its correctness. This paper also suggests more research on modeling of attributes store and policy sets for access decision computation. � 2018 IEEE.