Permission-centric hybrid access control

Abstract

Secure access control is a hot issue of large-scale organizations or information systems, because they have numerous users and information objects. They may adopt one of typical access control models such as ACL(access control list), MAC(mandatory access control), and RBAC(role-based access control). But an organization, in many cases, needs to apply multiple access control methods at the same time. In this paper, we proposed hybrid access control method for large organizations or information systems. In the proposed method, an organization or system can selectively choose one of access control model for each access event according to the nature of permissions. © Springer-Verlag Berlin Heidelberg 2007.