Location attestation and access control for mobile devices using GeoXACML

详细信息    查看全文

• 作者：Saritha Arunkumar^a ; ^{saritha.arun@uk.ibm.com} ; Berker Soyluoglu^b ; Murat Sensoy^b ; Mudhakar Srivatsa^c ; ^{msrivats@us.ibm.com} ; Muttukrishnan Rajarajan^d ; ^{R.Muttukrishnan@city.ac.uk}
• 关键词：GeoXACML ; Geospatial ; Access control
• 刊名：Journal of Network and Computer Applications
• 出版年：2017
• 出版时间：15 February 2017
• 年：2017
• 卷：80
• 期：Complete
• 页码：181-188
• 全文大小：1071 K
• 卷排序：80

文摘

Access control has been applied in various scenarios in the past for negotiating the best policy. Solutions with XACML for access control has been very well explored by research and have resulted in significant contributions to various sectors including healthcare. In controlling access to the sensitive data such as medical records, it is important to guarantee that the data is accessed by the right person for the right reason. Location of access requestor can be a good indication for his/her eligibility and reasons for accessing the data. To reason with geospatial information for access control, Geospatial XACML (eXtensible Access Control Markup Language) is proposed as a standard. However, there is no available implementation and architecture for reasoning with Geospatial XACML policies. This paper proposes to extend XACML with geohashing to implement geospatial policies. It also proposes an architecture for checking reliability of the geospatial information provided by clients. With a case study, we demonstrate how our framework can be used to control the privacy and data access of health service data in handheld devices.