Spatial and Temporal Organization Based Access Control for Wireless Network as a Component of Security Requirements

Abstract

The standard wireless local area network is the technology of connecting computers and myriad electronic devices to each other and to the Internet. The three major benefits that Wi-Fi networks offer are; global accessibility, ease of communication and cost effective. In such infrastructures, there is no physical method to restrict a system in radio range to be a member of a wireless network. For this reason, the definition of a security policy is required and must be able to meet a range of requirements, including those related to access control. In this paper, we propose an application of the “organization based access control model” (OrBAC) in the context of Wi-Fi networks, a case study and a simulation for an organization “faculty”. The use of OrBAC with location and temporal constraints allows to control access to resources or services via wireless network, based on the requester’s role in the Organization, his location and the time of the access request. The proposed solution limits the possibilities of attacks because each user has only access rights allowing him to perform his tasks within the organization.