Academia.eduAcademia.edu

A logic-based framework for attribute based access control

2004

Abstract Attribute based access control (ABAC) grants accesses to services based on the attributes possessed by the requester. Thus, ABAC differs from the traditional discretionary access control model by replacing the< i> subject</i> by a set of attributes and the< i> object</i> by a set of services in the access control matrix. The former is appropriate in an identity-less system like the Internet where subjects are identified by their characteristics, such as those substantiated by certificates. These can be modeled as attribute sets.

This document is currently being converted. Please check back in a few minutes.