DOI QR코드

DOI QR Code

A Universal Model for Policy-Based Access Control-enabled Ubiquitous Computing

  • Jing Yixin (Dept. of Computer Science and Engineering, Korea University) ;
  • Kim, Jin-Hyung (Dept. of Computer Science and Engineering, Korea University) ;
  • Jeong, Dong-Won (Dept. of Informatics and Statistics, Kunsan National University)
  • Published : 2006.03.01

Abstract

The initial research of Task Computing in the ubiquitous computing (UbiComp) environment revealed the need for access control of services. Context-awareness of service requests in ubiquitous computing necessitates a well-designed model to enable effective and adaptive invocation. However, nowadays little work is being undertaken on service access control under the UbiComp environment, which makes the exposed service suffer from the problem of ill-use. One of the research focuses is how to handle the access to the resources over the network. Policy-Based Access Control is an access control method. It adopts a security policy to evaluate requests for resources but has a light-weight combination of the resources. Motivated by the problem above, we propose a universal model and an algorithm to enhance service access control in UbiComp. We detail the architecture of the model and present the access control implementation.

Keywords

References

  1. W3C, Web Services Activity, http://www.w3.org/2002/ws/
  2. UPnP Forum, http://www.upnp.org/
  3. L. Kagal, T. Finin, A. Joshi, 'A Policy Based Approach to Security for the Semantic Web', Proceedings. of 2nd International Semantic Web Conference (ISWC2003), Sanibel Island, Florida, USA, Oct., 2003
  4. A. Corradi, N. Dulay, R. Montanari, C. Stefanelli, 'Policy-driven Management of Mobile Agent Systems', Proceedings Of Policy 2001, Springer- Verlag, LNCS 1995, Bristol, Jan., 2001
  5. Ryusuke Masoka, Mohinder Chopra, Yannis Labrow, etc., 'Policy-based Access Control for Task Computing Using Rei', Proceedings of the Policy Management for the Web Workshop, pp. 37-43, May, 2005
  6. Antonio Corradi, Rebecca Montanari, Daniela Tibaldi, 'Context-based Access Control for Ubiquitous Service Provisioning', Proceedings of the 28th Annual International Computer Software and Applications Conference (COMPSAC), 2004
  7. R. Masuoka, B. Parsia and Y. Labrou. 'Task computing-the semantic web meets pervasive computing', Proceedings of 2nd International Semantic Web Conference 2003 (lSWC), Florida, USA, pp. 866-881, Oct., 2003
  8. R. Masuoka, Y. Labrou, B. Parsia and E. Sirin, 'Ontology-enabled pervasive computing applications', IEEE Intelligent Systems, vol.18, no.5, pp. 68-72, 2003
  9. Z. Song, Y. Labrou, R. Masuoka, 'Dynamic service discovery and management in task computing', Proceedings of 1st Annual International Conference on Mobile and Ubiquitous Systems: Networking and Sevice (MobiQuitous), Boston, Massachusetts, USA, pp. 310-318, Aug., 2004
  10. A. Uszok, J. M.Bradshaw, 'KAoS policies for web services', W3C Workshop on Constraints and Capabilities for Web Services, Redwood Shores, CA, USA, Oct., 2004
  11. A. Uszok, J. M. Bradshaw, R. Jeffers, and M. Johnson, 'Policy and contract management for semantic web services', Proceedings of AAAI Spring Symposium on Semantic Web Services., California, USA, Mar., 2004
  12. Q. Ni, M. Sloman, 'An ontology-enabled service oriented architecture for pervasive computing', Proceedings of International Conference on Information Technology: Coding and Computing (lTCC), Las Vegas, Nevada, USA, pp.797-798, Apr., 2005
  13. L. Kagal, 'Rei: a policy language for the Me-Centric project', HP Labs Technical Report, 2002
  14. Rafae Bhatti, Elisa Bertino and Arif Ghafoor, 'A Trust-based Context-Aware Access Control Model for Web-Services', Proceedings of the IEEE International Conference on Web Services (lCWS), 2004
  15. Rafae Bhatti, Elisa Bertino and Arif Ghafoor. 'XML-Based Specification for Web Services Document Security', IEEE Computer, vol.37, no.4, pp41-49, 2004