Securing context-aware applications using environment roles

Abstract

In the future, a largely invisible and ubiquitous computing infrastructure \nwill assist people with a variety of activities in the home and at work. \nThe applications that will be deployed in such systems will create and \nmanipulate private information and will provide access to a variety of other \nresources. Securing such applications is challenging for a number of \nreasons. Unlike traditional systems where access control has been explored, \naccess decisions may depend on the context in which requests are made. We \nshow how the well-developed notion of roles can be used to capture \nsecurity-relevant context of the environment in which access requests are \nmade. By introducing environment roles, we create a uniform access control \nframework that can be used to secure context-aware applications. We also \npresent a security architecture that supports security policies that make \nuse of environment roles to control access to resources.

Cite this work

No public copy is stored for this record, so only the metadata is cited.

Stored only when both papers are in the corpus — 434 citations exist upstream.

Papers that cite the same references — the relational fallback while embeddings are still backfilling.