Anonymity in Attribute-Based Access Control: Framework and Metric
Citations Over TimeTop 17% of 2023 papers
Abstract
Anonymous access is an effective method for preserving privacy in access control. This study assumes that anonymous access control requires both frameworks and policies. Numerous solutions have been proposed for anonymous access at the framework level. In this study, these solutions are analyzed and quantified using a unified attribute-based access control (ABAC) anonymous access reference framework. Anonymous access at the framework level is the first line of defense, and inappropriate policies may undermine subject anonymity. An anonymity metric is proposed at the policy level to prevent authorization authority from re-identification using specific attributes and policies. The anonymity metric evaluates the risk of re-identifying a subject due to inappropriate access requests, as well as subject attribute assignment schemes and policies. This study is the first to focus on anonymity at the policy level in ABAC. Furthermore, a formal definition of anonymity suitable for ABAC is proposed. The feasibility of the proposed anonymity metric is verified through simulations.
Related Papers
- → Malicious changeload for the resilience evaluation of self-adaptive authorisation infrastructures(2020)5 cited
- Attribute-based Access Control Model for Web Services(2007)
- → Scalable Authorization in Role-Based Access Control Using Negative Permissions and Remote Authorization(2003)1 cited
- Role-based Access Control with Negative Authorization(2005)
- → Analyzing Security Policies(2010)