SLACM: Heterogeneous multilevel service aggregation access control model based situation logic

Abstract

During the process of service aggregation, heterogeneous multilevel interactive process, which contributes to the high security requirement of the access control model. Under the circumstances of service aggregation, in order to adapt the centralized access control between the service application system subject and object in the environment of WEB configurations, this paper proposed the Situation Framework based Cooperation Access Control Model. First of all, this paper analyzed the constitution of dynamic Situation factors of access controls in the service application systems and defining the factor of situation from multi-perspective; Moreover, this paper provided the concept of dynamic Situation finite state machine and present a system cooperation access gateway model supporting calculations and rules of the situation under the constraint of dynamic situations. Furthermore, based on the CP-ABE algorithm, this paper provides the SISA algorithm which strongly enhances the security of the finite state machine changing and data exchanging during the process of service aggregation. Finally, the music service aggregation case shows the feasibility and validation of the SISA model compared with other traditional access control model and summarized the relative innovativeness between SISA model and existing access control models.