A new modeling Paradigm for dynamic authorization in multi-domain systems

Abstract

The emergence of powerful, full-featured and small form-factor mobile devices enables rich services to be offered to it's users. As the mobile user interacts with multiple administrative domains, he acquires various attributes. In such dynamic usage scenarios, attributes from one domain are interpreted and used in another domain. This motivates the need for dynamic authorization at the time of interaction. In this paper, we investigate the requirements of multi-domain interactions and explore a new paradigm for modeling these requirements using the UCON model for Usage Control [5]. We propose extensions to UCON in order to accommodate dynamic authorizations requirements. © Springer-Verlag Berlin Heidelberg 2007.